Able to force browse to unpublished profiles of other users
If I log in as a community or PA user I’m able to force browse to unpublished impact profiles that I created as different PA. Example unpublished profile:
https://cedars-2.cpuc.ca.gov/impact-profiles/1310/
This profile doesn’t show up in the Impact Profiles Library table, which is good, so it seems like only the force browse access needs to be addressed.
- Environment
- Staging cedars-2
- Select user type
Status: Completed
Log in to comment and vote
No comments yet
Be the first to share your thoughts.