Anonymous Login
06-19-2018 07:43 PM

View Issue Details Jump to Notes ]
IDProjectCategoryView StatusLast Update
0004488SMF 2.1[SMF 2.0] Generalpublic2014-02-08 20:53
Summary0004488: Topic starter is able to delete posts in a locked topic
DescriptionAlthough a topic starter can not edit any posts in a topic when it is locked. They are still able to delete posts if permissions are set to do so.

I have provided a fix in the following topic. Although it is for 1.1.11 the changes are similar for 2.0 as the code hasn't changed much.
Steps To ReproduceUsing a regular user account, with permission to "delete own", create a topic with several posts. Then lock it with an admin or moderator account. Now viewing the topic with the user account the button is still there to delete one's posts. And it still works.
TagsNo tags attached.
Attached Files




Aleksi "Lex" Kilpinen (SMF Friend)

Honestly, I don't think this is a bug. If one is allowed to delete his own posts, then that should be allowed wether or not the topic is locked. I can see the reasoning behind not allowing to edit posts in a locked topic though, but this is different.


groundup (SMF Friend)

I agree with Kays.


Aleksi "Lex" Kilpinen (SMF Friend)


I do think the permission is "delete own" not "delete own, unless in a locked topic".

There are scenarios where a forum might be (legally even) expected to allow one to delete their own posts, and I don't think it would make a difference if the topic was locked or not.

The reason that editing posts in a locked topic is not allowed, is not to allow discussion to continue by editing posts, as far as I've understood - and I agree it should be like that. Deleting posts in a locked topic would not allow discussion to continue though.


Norv (SMF Friend)

Well, TBH to me it sounds better if we keep it consistent. If a topic is locked, then it practically means to me that it's now read-only for any purposes. (except for moderators). Delete_own is not a moderation permission, so IMHO, like edit, it shouldn't apply.

Open to discussion though. If it really makes sense to people to have the ability to delete, but not to edit, it's good to know.


Aleksi "Lex" Kilpinen (SMF Friend)

Well, I believe I just presented you with a real reason to allow delete, but not edit.
A board may be obligated to allow people to remove something they have posted,
and delete_own makes it possible at the moment, while edit_own would allow it as well, but would also make it possible to continue a discussion by editing existing posts.


Suki (Developer)

This still happens on 2.1? what should we do about it?

Leave the current behavior?
Force the lock and disallow the topic owner form deleting it?
Set a new permission "delete_own_locked" and applied when this particular case arise?


arrowtotheknee (SMF Friend)

Moved to in the interests of consolidation.
MantisBT (Modified for SMF Intergration)[^] Copyright © 2000 - 2010 Mantis Group