BCStudentSoftwareDevTeam / BCStudentSoftwareDevTeam/cas
Add 'must_be_authorized' decorator to functions in the controllers
Open
bug
major
- Dominant language
- JavaScript
- Stars
- 0
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
**[Original report](https://bitbucket.org/laborstudents/cas-flask/issue/310) by Kenny Louissaint Nelson (Bitbucket: [nelsonkenny](https://bitbucket.org/nelsonkenny), GitHub: [nelsonkenny](https://github.com/nelsonkenny)).**
----------------------------------------
@sanginovs found that he could edit a course with his berea credentials even when he is not authorized as a student. To fix that, we'll need to check all the controller functions and add 'must_be_authorized' decorator as needed.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.