addactivity can create Activities even if User is not authorized

AKSW / xodx

An implementation of Semantic Pingback and PuSH for a DSSN

http://aksw.org/Projects/Xodx

GNU General Public License v2.0

5 stars 6 forks source link

addactivity can create Activities even if User is not authorized #42

Open white-gecko opened 11 years ago

white-gecko commented 11 years ago

Sending a request to the addactivity action of the ActivityController without being logged in creates a new activity if the actor is specified correctly. A check if the current user is authorized for this action should be introduced.