Skip to main content

Able to force browse to unpublished profiles of other users

If I log in as a community or PA user I’m able to force browse to unpublished impact profiles that I created as different PA. Example unpublished profile:

https://cedars-2.cpuc.ca.gov/impact-profiles/1310/

This profile doesn’t show up in the Impact Profiles Library table, which is good, so it seems like only the force browse access needs to be addressed.

Environment
Staging cedars-2
Select user type
Status: Completed

Log in to comment and vote

No comments yet

Be the first to share your thoughts.