And only theres? I turn it on and any anonymous person can delete another's. I thought it would be cookie based, but no?

Comments

chromeyellow’s picture

Not cookie based. It's user id based (the user->uid object, to be precise), and every anonymous user has user->uid == 0. So the behaviour you saw is exactly what is supposed to happen.

jermb’s picture

ah thank you. i wonder if there is any way to implement this anyone has tried?