Berkeley169 / fight_Impunity_Haiti

Berkeley CS 169 project working with a non-profit group to fight impunity in Haiti.
1 stars 0 forks source link

Backend permissions control #63

Closed nherson closed 10 years ago

nherson commented 10 years ago

Anyone could technically make a manual POST request to create or edit documents and set them to 'published' or edit them when they shouldn't be able to. There should be a hook that prevents this behavior.