Anonymous vote deletion is not allowed

Issue #12 resolved
Paola Coccia
created an issue

With GENERIC_RATINGS_VOTES_PER_IP_ADDRESS = 1 the allow_vote check performed in the vote view prevents anonymous users from deleting their vote. The allow_vote method in the handler doesn't check if the form is deleting or creating the vote and doesn't accept other arbitrary arguments, so it can't be overridden.

Comments (1)

  1. Log in to comment