reset password
Author Message
pateln04
Posts: 22
Posted 09:44 Nov 28, 2012 |

If certain pages are only accessible to participants and we have implemented to hide the edit pages if they are not then is it still necessary to hide the links on those edit pages.  For instance if someone navigates to the edit project page who is not a participant  by entering the url with a project id they are shown an access denied page.  By that security measure do we need code against hiding say the save button on the edit page.

cysun
Posts: 2935
Posted 09:49 Nov 28, 2012 |

No, if you already implemented proper access control for the edit page, then hiding the Save button on the edit page is unnecessary.