Users should not be able to modify comments for the resources they own

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 6.0.4 GA
• Fix Version/s: 6.0.5 GA
• Component/s: Security
• Labels: None
• Branch Version/s:
  5.1.x, 5.2.x, 6.0.x
• Similar Issues: Show 5 results ; ;

  LPS-29896	Problem - Able to edit and delete others comments
  LPS-30949	Enterprise Calendar - When an event owner updates an event, there should be a choice whether to update the owner's own calendar event or for all invited resources as well
  LPS-26695	Allow users to remove their own activities from the feed
  LPS-25358	Annotate comments for translators/translations to resources
  LPS-24697	Comment Permissions - a user cannot edit / delete his own comments and cannot edit / delete the comments of other users if given the permission to do so

Users who created the resource (wiki page, document, blog, etc) are given all permission rights for comments causing an awkward permission situation.

Example: Regular user, Bob, posts a wiki article. Boss user, John, suggests changes via comments. Because Bob created the wiki, he has all permissions for the comments on his wiki page. Bob can then change John's comment to say "Excellent work Bob! We're giving you a 100% raise and my Boss position."