There are two issues here, but since the stacktrace is the same I'm combining this into one ticket since they may be related.
- Navigate to an existing question that was not written by the current user
- Create an answer
- View answer
The user is able to edit, delete, and reply to the answer but NOT mark it as the answer (this action should be hidden). Those permissions should only be granted to the question creator.
The "Mark as answer" icon appears, but clicking on it throws a browser permissioning error.
The user cannot update his answer. This permissioning error (above) also appears when a user tries to update his answer.
Tomcat 9.0.33 + MySQL 5.7.
Portal master 8fb1396b753a2583a0506423a65ea015e5c11afe