Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Teams detail page should only be accessible to logged in users #6631

Open
manjitapandey opened this issue Nov 14, 2024 · 1 comment
Open

Comments

@manjitapandey
Copy link

Describe the bug

  • Username list of team's manager and members are currently accessible for public without needing to log in.
  • Also my teams option is available for users without logging in. And since there isn't user information available, clicking on my teams shows error.
  • Clicking on my team when not logged in leads you to view the list of all teams name and logo.

To Reproduce
Steps to reproduce the behavior:

  1. Go to 'teams page through URL https://tasks.hotosm.org/teams/13/membership/'
  2. Make sure you aren't logged into the system.
  3. Click on 'my teams'
  4. See error

Expected behavior
User shouldn't be able to see the teams page without logging in.

Screenshots
image

Additional context
Related to #6541

@ramyaragupathy
Copy link
Member

In agreement with you @manjitapandey - user list for a team, list of Tasking Manager Teams should be accessible only for logged-in users.

royallsilwallz added a commit to naxa-developers/tasking-manager that referenced this issue Nov 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants