4413: User with rights to edit another user's review does so under the name of the original user.

1036312

What version are you running?

2.5.3

What's the URL of the page containing the problem?

-host-/r/xxxxx

What steps will reproduce the problem?

  1. Post a review with a regular user (user1)
  2. submit/discard that review with another user (user2) who has rights to do so

What is the expected output? What do you see instead?

Expected: user2 should be listed as author of the submit/discard action, at the very least as author on behalf of user 1
Instead: user1 is shown to be the author, even though user2 performed the action. This is confusing and in some cases even dangerous.

What operating system are you using? What browser?

Not important, but Ubuntu/Chrome

Please provide any additional information below.

brennie
#1 brennie

I assume by "review" you mean a review request. This issue is fixed in Review Board 3.0+. The fix will not be migrated to 2.5 due to it requiring database schema changes.

  • -New
    +WontFix