eubr-bigsea/tahiti

Opening workflow of others users

Closed this issue · 1 comments

mgonc commented

If I change the id of the workflow in url I can access workflow of other users.

Example:
https://dm.ctweb.inweb.org.br/home/workflows/**ID**/draw?platform=1

https://dm.ctweb.inweb.org.br/home/workflows/20/draw?platform=1

mgonc commented

Need to discuss a implementation of roles in thorn too