Skip to content

Can create new place through direct url #219

Description

@mmezher

If a user goes to the direct urls for venues or new venues, they are able to create a new place to add to venues. Once hitting back, they are able to view all venues and edit or destroy them.

Steps to recreate:

  1. Go to https://www.railsschool.org/venues/new or https://www.railsschool.org/venues/ (the rest of the instructions are a guide on the former url)
  2. Create a new venue
  3. Click "save"
  4. Click "back"
  5. View all venues from https://www.railsschool.org/venues/
  6. Attempt to delete/edit venues

Expected Outcome: Users who are not administrators should not be able to edit, destroy or create venues.

Actual Outcome: Users can create, edit, and destroy venue places.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions