Page MenuHomePhabricator

Sort out access control
Closed, ResolvedPublic

Description

Does the following sound sufficient?—

  • While a contest is underway, no one other than a contest admin can see the scores and participants.
  • Everyone can always (even without logging in) see the basic details of all contests (name, dates, included index pages, and admins' usernames).
  • After a contest is finished, everyone can see everything.
  • Anyone can create a contest (after logging in) and in doing so become an admin.
  • No one other than a contest admin can edit a contest.

Event Timeline

While a contest is underway, no one other than a contest admin can see the scores and participants.

https://github.com/wikisource/wscontest/pull/2

Samwilson claimed this task.

I think all of these items are satisfied now. If anyone notices anything amiss, please report a new issue.