benadida/helios-server — Issue #23: Private elections require trustees to be logged in as voters to submit decryptions
Author: lizthegrey
Created: 2011-12-20 02:46:28+00:00
State: open

If a trustee is not also a voter in a private election (or happens to not be logged in as a voter), they will be unable to submit decryption results [getting a 302 when attempting to POST to https://www.foo.tld/voting/helios/elections/UUID/trustees/UUID/upload-decryption to a page that would ask them to authenticate to view the election]. Worse yet, this fails silently and appears to claim that uploading the partial decryption was successful rather than displaying an error; since the POST is done as an AJAX call, nobody sees the login page.