csvalpha/amber-api

Incorrect moderation permissions check

wilco375 opened this issue · 1 comments

For some reason, I am able to see and moderate moderated mails for leden@csvalpha.nl, even though I am not a member (only an ex-member) of the moderated group for that alias.

Nevermind, Mailbeheer has the stored-mail read/destroy permission