Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

IndicatorJob creation through UI bypasses DRF authentication #530

Open
flibbertigibbet opened this issue Dec 1, 2014 · 0 comments
Open

IndicatorJob creation through UI bypasses DRF authentication #530

flibbertigibbet opened this issue Dec 1, 2014 · 0 comments

Comments

@flibbertigibbet
Copy link
Contributor

If a non-administrative user attempts to create an indicator job on a non-scenario through the DRF browseable API, DRF refuses permission. However, the UI page will allow non-admin users to successfully run indicator calculations for non-scenarios, creating an IndicatorJob with the non-administrative user as its owner.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@flibbertigibbet