Loading Profile...
security bug
I set up a new product at my account and tried, to check security mechanisms, if I can add product to other accounts by changing the url to getsatisfaction.com/soup and I was able to do it. Is that intended?
I’m happy
1
person has this problem
I have this problem, too!
Tell me when someone solves it.
The more people who report this problem, the more it gets noticed.
The more people who report this problem, the more it gets noticed.
The company thinks this is not a problem.
-
Inappropriate?You edited a product listing to change its URL in the description, is that correct? Or am I misunderstanding?
-
Inappropriate?i created a product at http://getsatisfaction.com/tidy/products. my company! than just for fun i changed tidy to soup (http://getsatisfaction.com/soup/products) and was able to add a product there as well. is that a bug? -
Inappropriate?Any logged in user can add a product to any company. If the company is claimed, then they can choose to remove it. /company_name/products is accessible to everyone through the company navigation.
I’m confident
-
Inappropriate?We are, however, looking to refine this process. We allow users to add products to encourage collective effort, but we're open to tightening up that process if it leads to a better overall experience. Thoughts?
EMPLOYEE
EMPLOYEE
EMPLOYEE
