EchoLeague / Echo-League-Website-Testing

A repo to track testing and feedback for the EchoLeague website
2 stars 0 forks source link

Players can join any team without being added by captain #26

Closed liampwll closed 7 years ago

liampwll commented 7 years ago

User State: Logged In

Environment: Test Server

Version or Branch: 0.15.1

Description: Players can join any team they want by modifying the PUT request when editing their profile.

Steps to Reproduce:

  1. Edit profile and intercept PUT request
  2. Change "team_id" to a team ID
ammuench commented 7 years ago

fixed with backend version 0.13.2