Hacker News Reader

This is fun, great work!

Note that I'm able to see (and remove) other people's notes on the site, which I don't think is intended. (Unless those are pre-populated as examples.)

View on HN

The authorization issues have been fixed. You can now only view the things that you have submitted. I took a "least permissive access" view, starting with locking down everything. Then, through a series of tests, opening up additional actions as proven necessary, based on which user owned the object in question.

I'm working on a couple of redirect issues, and a broken feature or two today, and expect to have the major kinks worked out by tomorrow morning.

Thanks again for trying it out. Much appreciated!

You don't even have to be logged in to see/edit other people's notes...

Yep, I'm fully aware of the authorization stuff - CanCan will be added over the next week or so.

It is basically a demo right now, and I'm playing around with it. I will be putting limits on this very soon. Having demo data in there (though there isn't much) is sort of meant to show what it can do.

Thanks for dropping by!

This has been fixed.

Reply on news.ycombinator.com