search

gnocode / noladex.org

People of New Orleans
http://www.noladex.org
21 stars 10 forks source link

anyone can access the categories controller #42

Closed wedgex closed 12 years ago

wedgex commented 12 years ago

The categories controller doesn't have any authorization on it so anyone can come in and add/edit/delete them.

joeellis commented 12 years ago

Conversation on this continue in issue #41: https://github.com/gnocode/noladex.org/issues/41