search

raviramanathan / cube-bookstore

Automatically exported from code.google.com/p/cube-bookstore
GNU General Public License v3.0
0 stars 0 forks source link

staff_edit page can be accessed by a normal user #44

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
1. Log in as a normal user
2. go to /staff_edit/
3. Type in your user number and assign a staff or admin role

You should not be able to get to this page at all

Original issue reported on code.google.com by davidkazuhiro@gmail.com on 2 Apr 2010 at 7:35

GoogleCodeExporter commented 9 years ago 
This issue was closed by revision r103.

Original comment by davidkazuhiro@gmail.com on 2 Apr 2010 at 7:40