yaimuu / annotateme Goto Github PK

An expert is not allowed to acess to update expert page, but actually, he can by with the url "/list/id/update"

To correct that :

• put this lignes at the top of "expert_update.blade.php" :
  @if (session()->get('typeExp') != NULL && (session()->get('typeExp') == 'superadmin' || session()->get('typeExp') == 'admin'))
  --> this check if someone is connect and if he is a superadmin or an admin

and this lignes at the bottm of the blade :
@else
< h1 style="color:red;">You are not connected
< a id="back_btn" href="{{url('/')}}">❮ Log in

@endif
--> show the error message

When creating a project, the forms do not process duplicates of names. A form check should be performed and an error message displayed if the program detects a duplicate.

An expert is not allow to access to the list page, but actually, event if have not the button to go, he can access by url.

To correct that :

• put this lignes at the top of "expert_list.blade.php" :
  @if (session()->get('typeExp') != NULL && (session()->get('typeExp') == 'superadmin' || session()->get('typeExp') == 'admin'))
  --> this check if someone is connect and if he is a superadmin or an admin

and this lignes at the bottm of the blade :
@else
< h1 style="color:red;">You are not connected
< a id="back_btn" href="{{url('/')}}">❮ Log in

@endif
--> show the error message

The application is not very responsive.

An admin must be able to modify an expert. However, in the application, the button to modify is not clickable for an administrator, but only for a super admin. This button must be made clickable so that the administrator can access an expert's modification form.

When an expert logs in and selects a project, he or she is not expected to be able to modify the project. It is therefore necessary to change the interface of the expert user so that he does not have access to the option to modify a project.

When creating an expert, the form does not correct or indicate the input conventions it expects. For example, for the postal code, no space should be used. If the user puts one in, the application crashes. We should do a form check and treat all cases like this.