Labmanager does not check if the user is admin in requests
Closed this issue · 0 comments
porduna commented
In the following code:
if course_permission.course.course_id in courses:
# Let the server choose among the best possible configuration
courses_configurations.append(course_permission.configuration)
It does not check if the user is an administrator (in which case, the user should be able to use any laboratory).