Open WadeVaresio opened 3 years ago
Currently there is no check on the endpoint "/api/member/tutors/upload" as to whether the user is allowed to upload tutors.
Endpoint should return an unauthorized request response.
Uploading CSV of Tutor data with incorrect permissions works.
Bug Report
Currently there is no check on the endpoint "/api/member/tutors/upload" as to whether the user is allowed to upload tutors.
Steps to Reproduce
Expected / Desired Behavior
Endpoint should return an unauthorized request response.
Observed / Actual Behavior
Uploading CSV of Tutor data with incorrect permissions works.