aurweb/web/html
Eli Schwartz 3ac958ac01
Move permission for LIST_COMMENTS to dev/tu block
In commit 3578e77ad4 we implemented
listing of comments from the account details page , but this was
intended to only be available to TUs and Devs. As the comment says:
"display the comment list if they're a TU/dev"

The credential checking code, however, set this credential for all
users, contrary to the intention of the commit.

In order to preserve the ability to list a person's own comments, also
declare the allowed uids based on the profile being viewed.
2019-08-18 13:01:37 -04:00
..
css Display warning when flagging VCS packages 2019-05-25 19:01:33 -04:00
images Remove 'new' tag from updates table 2016-01-31 20:12:56 +01:00
js Use minified typeahead JS from archweb 2013-03-26 00:54:18 +01:00
404.php 404.php: Squelch warning on empty PATH_INFO 2017-02-27 18:20:00 +01:00
503.php Implement a maintenance mode 2015-06-11 14:32:21 +02:00
account.php Move permission for LIST_COMMENTS to dev/tu block 2019-08-18 13:01:37 -04:00
addvote.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
comaintainers.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
commentedit.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
home.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
index.php Allow listing all comments from a user 2018-08-06 06:03:58 +02:00
login.php login.php: Escape quotes in the referer field 2017-11-05 11:28:11 +01:00
logout.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
packages.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
passreset.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
pkgbase.php Add "Enable notifications" checkbox in "Add Comment" form 2019-04-28 08:58:29 -04:00
pkgdel.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
pkgdisown.php Add capability for co-maintainers to disown packages 2018-02-24 14:57:31 +01:00
pkgflag.php Display warning when flagging VCS packages 2019-05-25 19:01:33 -04:00
pkgflagcomment.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
pkgmerge.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
pkgreq.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
register.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
rpc.php rpc.php: Display generated documentation 2015-10-04 11:40:38 +02:00
rss.php Stop using each() 2018-05-12 13:35:11 +02:00
tos.php Add support for Terms of Service documents 2017-04-30 16:47:13 +02:00
tu.php Call check_sid() from a central location 2017-04-27 09:22:53 +02:00
voters.php Stop using each() 2018-05-12 13:35:11 +02:00