The new Delete Project button can be used by anyone who has access to a project's home page (which is probably pretty much everyone) despite not being the project's creator or a member of the appropriate group.
I was able to delete a project created by Jassper which was not associated with any group I was a member of. Admittedly it was his "Delete this" project so I don't think he'll mind me taking the liberty however the fact remains this is open to abuse.
The Delete Group button is located on the Edit Group page rather than the group's home page.
Retour en haut
