Last modified: 2012-01-12 12:25:24 UTC
Inline comments don't check if the user is allowed to comment before showing them the comment box
The best way to reproduce the issue is to try to add an inline comment while not logged in. The API does returns a success. I think it is related to the API not checking for the correct user right when adding a comment using the codereviewupdate action. Related bug : the JS script need to cleanly handle API errors (it does not do anything right now).
r96173 add a check in the API coderevisionupdate. If user is not allowed to post comment, it will show up an error box with the API error message. Still need to check userright using javascript. Not sure how to do it though :(
lowering priority of CodeReview bugs I have opened or that are assigned to me.
feature reverted in core