IzzyLeech / terok-nor-station

0 stars 1 forks source link

Testing: User being able to seleted different user a create_by for a post #28

Open IzzyLeech opened 1 year ago

IzzyLeech commented 1 year ago

The feedback I received from testing was that when the user was creating a post, the user was able to select another user as the created_by field. This needs to be changed as I don't want another user to be able to submit as someone else.

IzzyLeech commented 1 year ago

Fixed by excluding the created_by field in postform and added code that will make created_by field take in the value of the request.user.