streamaserver/streama

Remove profiles from anonymous access?

Open

Aperta il 6 apr 2019

Vedi su GitHub
 (6 commenti) (0 reazioni) (0 assegnatari)JavaScript (9565 star) (977 fork)batch import
DiscussionHelp wanted

Descrizione

aswell with view state from database anonymous users should not modify anything on database at al, just access

Guida contributor

Tech stack
javascript
Dominio
securityauthenticationbackend
Tipo issue
security
DifficoltàQuanto dovrebbe essere impegnativa per un nuovo contributor.
3
Tempo stimatoTempo stimato per completare e verificare uno scope piccolo.
half day
Stato attivitàQuanto è probabile che la issue sia ancora attiva e reviewable.
stale
ChiarezzaQuanto chiaramente la issue descrive problema, scope e risultato atteso.
unclear
Prerequisiti
understanding of the application's authentication flowknowledge of database queries for user profiles and view state
Adatta ai principiantiQuanto la issue è adatta a contributor alla prima esperienza.
30
Direzione di ricerca
Examine the codebase to understand how anonymous users are currently handled. Look for authentication middleware (likely in a Node.js/Express setup) that controls access to routes related to profiles and view state. Check the database schema for tables storing profiles and view state. The issue mentions removing these from anonymous access, so likely need to modify route guards or add authorization checks to reject anonymous users from modifying those resources. No linked PRs or maintainer responses provide additional guidance, so start by tracing the routes for profile management and view state updates.