covidwatchorg / portal

Covid Watch Portal web app for diagnosis verification
Apache License 2.0
8 stars 3 forks source link

Prevent unauthorized users from modifying the store (frontend) #481

Closed veeara282 closed 4 years ago

veeara282 commented 4 years ago

Right now, the user can access the store through the console and modify the user or org's properties via the __update method. We should add some Firebase authentication logic to check that the user is authorized to set those properties before allowing them to do so.