mirror of
https://github.com/Unleash/unleash.git
synced 2025-01-06 00:07:44 +01:00
c5afa8ff11
## About the changes
This was spotted while testing automated actions. Steps to reproduce:
1. Add an editor user
2. Get a PAT for the editor user
3. As Admin create a feature in a project where the editor user is not a
member and enable the feature
4. Try using the editor's PAT to modify the feature
5. As the editor create a project (you'd be made owner) and try the same
request but just change the project name for the new project just
created (don't change anything else)
**Expected behavior**: you can't disable the feature
**Actual behavior**: the feature is disabled
This does not happen when trying to turn on a flag because during the
turn-on process we do validate if the feature belongs to project when we
call updateStrategy:
|
||
---|---|---|
.. | ||
access-service.test.ts | ||
access-service.ts | ||
account-service.ts | ||
addon-schema.ts | ||
addon-service-test-simple-addon.ts | ||
addon-service.test.ts | ||
addon-service.ts | ||
api-token-service.test.ts | ||
api-token-service.ts | ||
client-spec-service.test.ts | ||
client-spec-service.ts | ||
context-schema.ts | ||
context-service.ts | ||
edge-service.ts | ||
email-service.test.ts | ||
email-service.ts | ||
event-announcer-service.ts | ||
event-service.ts | ||
favorites-service.ts | ||
feature-service-potentially-stale.test.ts | ||
feature-tag-service.ts | ||
feature-type-service.ts | ||
group-service.ts | ||
health-service.ts | ||
index.ts | ||
openapi-service.ts | ||
pat-service.ts | ||
project-health-service.ts | ||
project-schema.ts | ||
project-service.ts | ||
proxy-service.ts | ||
public-signup-token-service.ts | ||
reset-token-service.ts | ||
scheduler-service.test.ts | ||
segment-schema.ts | ||
segment-service.ts | ||
session-service.ts | ||
setting-service.ts | ||
state-schema.ts | ||
state-service-export-v1.json | ||
state-service.test.ts | ||
state-service.ts | ||
state-util.ts | ||
strategy-schema.ts | ||
strategy-service.ts | ||
tag-schema.test.ts | ||
tag-schema.ts | ||
tag-service.ts | ||
tag-type-schema.test.ts | ||
tag-type-schema.ts | ||
user-feedback-service.ts | ||
user-service.test.ts | ||
user-service.ts | ||
user-splash-service.ts | ||
version-service.test.ts | ||
version-service.ts |