Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Manage Pledge page shows error when visited without pledge details #259

Open
sumitsinghwp opened this issue Jun 20, 2024 · 1 comment
Open

Comments

@sumitsinghwp
Copy link

sumitsinghwp commented Jun 20, 2024

Hey Team,

I have visited https://wordpress.org/five-for-the-future/manage-pledge/ page there are some accessible type issues. this page should not be accessible or should error out or something when someone without a pledge is checking.

for more information, you can chat here - https://wordpress.slack.com/archives/C037W5S7X/p1718871181491009?thread_ts=1718870467.828969&cid=C037W5S7X

image

Here are the steps to find the link.

  1. Go to this page - https://wordpress.org/five-for-the-future/handbook/organization-pledge-guide/onboarding-organization-and-team-setup/
  2. Then Click on Manage Pledge link.

image

@ryelle ryelle changed the title accessible issue on https://wordpress.org/five-for-the-future/manage-pledge/ page Manage Pledge page shows error when visited without pledge details Aug 27, 2024
@ryelle
Copy link
Contributor

ryelle commented Aug 27, 2024

This page should not be linked to directly — a company managing their pledge should do so with the "Edit Pledge" link on their company page. After confirming their access, it emails a link to the pledge owner with the full URL, which includes the pledge ID and an authentication token.

Screenshot 2024-08-27 at 5 27 42 PM

If you visit this page directly, as above, it sees no auth token and errors. This message could be updated in the code, but really the link should be removed from the Handbook.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants