search

CHSCodeForChange / Sapphire-Web

The website/backend repository for Sapphire, a platform to help organizations manage volunteers.
https://sapphire-web.herokuapp.com
GNU General Public License v3.0
8 stars 2 forks source link

ALL THE SECURITY CHECKS MIGHT BE BROKEN #136

Closed armaangoel78 closed 6 years ago

armaangoel78 commented 6 years ago

Basically we aren't checking if a user is permitted to do things properly.

computerquest commented 6 years ago

the problem is horribly inconsistent checking of organizer if you have a problem make sure the security verification is: group.get_is_organzer(request.user)