https://bugzilla.wikimedia.org/show_bug.cgi?id=67765
Bug ID: 67765
Summary: Session state sharing between multiple tabs and
windows gives access to edit other Users page in VE.
Product: VisualEditor
Version: unspecified
Hardware: All
OS: Windows XP
Status: UNCONFIRMED
Severity: normal
Priority: Unprioritized
Component: General
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected], [email protected]
Web browser: ---
Mobile Platform: ---
Created attachment 15887
--> https://bugzilla.wikimedia.org/attachment.cgi?id=15887&action=edit
W1.png
Setup- Have two different User accounts, say U1 and U2.
Test Environment- test2
Steps to Reproduce-
Scenario #1-
1> Login to U1 account and go to the user page.
2> Now open a new tab in the same browser and go to test2 web page. You will
automatically be logged in as U1.
3> Log out from U1 and login again in the same page as U2. Go to the user page.
4> Open tab which has U1 user page and make some edits in the VE. Save page.
Problem#1-The page gets saved under U1 account even though the last login was
made with U2’s information (the last tab’s logged in session info should be
carried out to all the previously opened tabs).
Problem#2- While you are still on the same page click on the User page link at
the top. Notice that now the current logged in User name “U2” is displayed at
the top, but the content in VE is still the same from U1’s user page. Click on
Edit tab and you can make changes to U1’s user page and save them.(See
screenshot W1.png) .
Scenario#2- The same steps and observations as above, but with multiple windows
instead of tabs.The same behavior was also found in single window interaction.
--
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
