Tighten up permissions
Open
- Dominant language
- Python
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Currently, any logged in user can view any user's registered API keys and handover tokens. Implement object-level permissions with django-guaridan to prevent this https://django-guardian.readthedocs.org/en/stable/
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.