Series endpoint shows non-public series when privileges are changed.

Steps to reproduce

Steps to reproduce:
1. first create a private series and then
2. make it public and then
3. make it private again.

Actual Results:
This test resulted in a series, which is listed in even anonymous searches to /series/series.json rest. So it seems that a private series cannot made public and then private again.

Expected Results:
The series must be private.

Workaround (if any):

Status

Assignee

Rubén Pérez

Reporter

RubenG

Severity

Security

Tags (folksonomy)

Components

Fix versions

Affects versions

1.5.0
1.4.3

Priority

Major
Configure