Details
-
Sub-task
-
Resolution: Fixed
-
Critical
-
1.2
-
None
-
None
Description
Step 1 - Login as a regular member, non-admin (also works for any loged in person)
Step 2 - Add an asset
Step 3 - Nominate the asset
Step 4 - Go back to the asset and select View
Step 5 - The "Review" Link is present under the Pending Review
Non reviewers/admins see and can access the "Review" link(Post nomination). This includes site visitors.
Fixing the bug should prevent this secondary problem, but listed here for thoroughness - However, if a visitor tries to submit a review, a Velocity error is generated (At least).
From Joshua - We need to add a review group and restrict access to that review group, editors and admins (And remove the review link for non-reviews/editors/admins)