search

OpenTreeOfLife / phylesystem-1

doc store for the Open Tree of Life study curation API
1 stars 1 forks source link

Anonymous user can create a study!? #7

Closed jimallman closed 9 years ago

jimallman commented 9 years ago

See https://github.com/OpenTreeOfLife/phylesystem-1/commit/52f7a0020cc4814a0f1a1bfb012205511789000c

Assuming this was submitted via the curation tool, it should not be allowed unless the user is logged in.

Possibly a stale session (curator tool open and idle, then saved after session timed out)? Or maybe we don’t guard the create tool as carefully?

jimallman commented 9 years ago

Drat, moving this to the main opentree repo and closing here.