Add restriction in the backend so that a user can only download the file he's autorized to

chairemobilite / transition

Transition is a modern new approach to transit planning. It's a web application to model, simulate and plan public transit and alternative transportation.

http://transition.city

MIT License

22 stars 13 forks source link

Add restriction in the backend so that a user can only download the file he's autorized to #868

Open greenscientist opened 7 months ago

greenscientist commented 7 months ago

Right now, there's no security check on the file download. If you have the right path any users can download any files that are present in the export folder.