Trying to create topic in restricted category
-
Repro:
- Enter "Programmers' Testing" without being in the programmers group
- Click "Create topic"
- Watch editor opening and letting you write the post
- Click "submit"
- Get slapped in the face by the "Unknown error: 403 forbidden" dialog
- Notice that instead of letting you know earlier that you can't create a topic there, Discourse just neglects to set the category (since it isn't on the list). And instead of "You must choose a category" popup, you get 403'd.
-
@matches, your tracking services are needed!
-
Still better than what my company does......you'd click "Submit", and nothing would happen.
-
It's not a competition.
-
I'm the least competitive poster here, so there, I win.
-
Programmers testing main category is read by all, restricted write (programmers_testing) group
bot testing is read by all, write by trust something / bots
TBD is read by programmers_testing, write by programmers_testing
Error 403 is stupid, but I think it just means you don't have permissions to write to the category. (Though IMO either the editor should be greyed out with a message, or a better error should be displayed)
I'll file it, but I think it falls under enhancement request rather than bug
-
Error 403 is stupid, but I think it just means you don't have permissions to write to the category.
The problem is that:
a) the "create topic" button appears anyway
b) when you click it, you get the editor, but there's no category selected in the dropdown
c) normally if you try to post with no category selected, it shows a red popup next to the dropdown, but in this case it slaps you with 403.Definitely a glitch.
-
-
The problem here is a symptom of the fact that you are not permitted to create an uncategorised topic on DC on TDWTF.
Normally when you click Create Topic in a category, the category dropdown preselects the category you're in.
If you don't have create permissions (like in Bot Testing unless you're in
programmers_testingorbots) there is still a Create Topic button (which shouldn't be there if you don't have create - this is the bug) but it preselectsSelect a categorysince you don't have Bot Testing in that list.
-
That's a 503, even more fun.
Filed under: now to find a way to stick 303 somewhere, preferably to goatse
-
I'm aware it's a 503, I was making a funny using discourse issues.
I'll just make a video of it tonight. It's literally 100% repro. It makes pasting code fucking hard.
-
there is still a Create Topic button (which shouldn't be there if you don't have create - this is the bug)
That's one bug. That's the other:
http://i.imgur.com/Ai9Eu0I.png
http://i.imgur.com/OkySEbh.png
Basically, despite what the dropdown says, it does actually try to create a topic in this category. It probably also tries to set the dropdown to the category, fails (since the categories you don't have create permissions on aren't there) and defaults it to "Select a category", but still keeps the category id as data to send.
-
That's one bug. That's the other:
I get the second, but not the first, with Create Topic in Bug Testing if I don't touch the dropdown.
Subsequently messing around with the category dropdown gives me the first.
-
I get the second, but not the first, with Create Topic in Bug Testing if I don't touch the dropdown.
When you try to create from the main page, you get the first. Or when you deliberately select "Select a category...".
It's classic dropdown fuckup - instead of checking the dropdown on send, they check the value they stashed somewhere on clicking "Create".
-
