3cn-ecn/nantralPlatform

Can update or delete event without being admin

Closed this issue · 0 comments

rravelli commented

Api view UpdateEventApiView do not check whether the user is admin. So you can delete or update an event without being admin.