# Composer lets you edit someone else's post

**URL:** https://meta.discourse.org/t/composer-lets-you-edit-someone-elses-post/36758
**Category:** Bug
**Created:** [December 15, 2015, 8:25pm UTC](https://meta.discourse.org/t/composer-lets-you-edit-someone-elses-post/36758 "2015-12-15T20:25:33Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![jieshuang](https://avatars.discourse-cdn.com/v4/letter/j/ebca7d/32.png) [@jieshuang](https://meta.discourse.org/u/jieshuang)
#### Post date: [December 15, 2015, 8:25pm UTC](https://meta.discourse.org/t/composer-lets-you-edit-someone-elses-post/36758/1 "2015-12-15T20:25:33Z")

</div>

You can’t _save_ an edit, which is good! But I’d suggest you shouldn’t even be able to open the composer.

Simple repro: Go to bottom of a topic, hit J and/or K up to a few times to select a post. Then hit E and the composer opens an edit window.

 ![](https://global.discourse-cdn.com/meta/original/3X/d/a/dafe7841fd1a090b90e981990574c6b21dbb6bf9.png)

If you hit Save Edit, you’ll get “You are not permitted to view the requested resource” which is also probably the wrong error message.

This sure confused the heck out of me when I ran into it a few minutes ago.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [December 15, 2015, 10:40pm UTC](https://meta.discourse.org/t/composer-lets-you-edit-someone-elses-post/36758/2 "2015-12-15T22:40:15Z")

</div>

Yes this is a bug, can you add it to your list @techapj?

---

<div class="post-metadata">

### Author: ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [December 16, 2015, 1:59pm UTC](https://meta.discourse.org/t/composer-lets-you-edit-someone-elses-post/36758/3 "2015-12-16T13:59:59Z")

</div>

Fixed via:

[https://github.com/discourse/discourse/commit/2412542c7769682ba5002df627dc359b2e35ef23](https://github.com/discourse/discourse/commit/2412542c7769682ba5002df627dc359b2e35ef23)

There was a similar issue when non-authorized user tries to delete a post using keyboard shortcut, fixed that too.

---

<div class="post-metadata">

### Author: ![techAPJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/techapj/32/342990_2.png) [@techAPJ](https://meta.discourse.org/u/techAPJ)
#### Post date: [December 16, 2015, 2:00pm UTC](https://meta.discourse.org/t/composer-lets-you-edit-someone-elses-post/36758/4 "2015-12-16T14:00:13Z")

</div>