Defect #429
Invitations dont check email of logged user (case of sharing computer)
Status: | New | Start date: | 11/24/2012 | |
---|---|---|---|---|
Priority: | Low | Due date: | ||
Assignee: | - | % Done: | 0% | |
Category: | Others | |||
Target version: | - | |||
Resolution: | Tags: |
Description
If I receive an invitation to Kune, when clicking in the hash-link, it checks I'm already logged in => It directly offers me friending with the inviter. However, there is no check that the actual email that was invited is the email of the person who is logged in. That is, two persons might be sharing computer, A is in Kune, B is not. C invites B. B clicks on the hash-link => A's sessions opens => Kune offers A to friend C (!).
History
#1 Updated by Vicente J. Ruiz Jurado almost 12 years ago
- Priority changed from Normal to Low