It is possible to generate a brochure PDF as anonymous - Githubissues

DarkmiraTour / community-event-manager

Web application with a collection of tools helping people organising community events such as multi-days conference with reminders, CRM and such

GNU General Public License v3.0

21 stars 22 forks source link

It is possible to generate a brochure PDF as anonymous #150

Closed alcalyn closed 5 years ago

alcalyn commented 5 years ago

Current Behavior

I can generate a brochure PDF as anonymous, but this feature should be accessible only as admin.

How to reproduce scenario

Be logged out
Access /sponsorships/pdf

Expected

Be forbidden or redirected to login page

Actual

I see a PDF that I should not access