API Profile: in Feedback tab, anonymous user (not logged in) can see view and remove options for a feedback

[Nazarah]

Steps to reproduce:

• go to nightly.apinf.io
• without signing in, go to any API profile
• click on Feedback tab

Result

• user can see View and Remove Button for a feedback.
• User can view or remove a feedback

Expected Result:

• User should not be able to see any of the buttons or to perform any actions for it
• open question: should an anonymous user be able to view feedbacks to an API

Environment

• OS: Windows 8
• Browser: any

[marla-singer]

@Nazarah I think any user can View feedback. Otherwise why do we have the vote system for feedback item?

[Nazarah]

@marla-singer : if only the View Feedback button stays there, it is fine. Currently any user not logged in can delete previously given feedback. I'm more concerned about this

[bajiat]

@Nazarah I think this was resolved in #1744, which was merged yesterday. This is the situation in nightly today:

[marla-singer]

@bajiat Yes, but we hid View button too. I think we should came back this, these is easy

[bajiat]

I'll create another issue for View button and close this one as resolved.