The issue is that anonymous users have rights to edit polls under certains circumstances.
(cache is disabled)

This is the sequence

1) Anonymous users create a binary poll (default unpublished)
2) Admin publish the poll (considering is OK)
3) Anonymous users are allowed to "Edit" that poll, doesn't matter the IP

The only way to avoid edition from Anonymous users, is changing also the ownership at point 2)

If you wanna try, we may coordinate a test, pls let me know. Use the contact form at www.votepls.com

Comments

ChrisKennedy’s picture

ChrisKennedy commented
Status: Active » Closed (works as designed)

This is how Access control works for all parts of Drupal. If you gives Anonymous users the "edit own polls" permission it will not differentiate by IP.