…/combine/organization/id (where id = an organization id, ex., 3)
…/combine/analysis
…/combine/background_tasks
…/combine/background_tasks/task/id (where id = a task id, eg., 75)
Possibly others...
I think that the functions that handle this in core/views organization.py, analysis.ph, and core_background_tasks.py need to have the @login_required decorator added to them, similar to views/published.py (which works properly).
I also think this should be a high priority issue since it allows access to back-end administrative functions.
The following links exhibit this behavior:
I think that the functions that handle this in core/views organization.py, analysis.ph, and core_background_tasks.py need to have the @login_required decorator added to them, similar to views/published.py (which works properly).
I also think this should be a high priority issue since it allows access to back-end administrative functions.