Security issue: after logged out user can still modify content in the app

micado-eu / pa_application

application for the PA

European Union Public License 1.2

1 stars 4 forks source link

Security issue: after logged out user can still modify content in the app #129

Closed gortazar closed 3 years ago

gortazar commented 3 years ago

Steps to reproduce:

Clic on logout
Access https://pa.micadoproject.eu/events
You can modify/add new events

Other endpoints can be accessed as well: https://pa.micadoproject.eu/information. Furthermore, logging out does not bring the user to the home page, it remains in the events page.