security: ensure users cannot add themselves to clubs and teams #63
Labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
tib-baseball/skylarks-diamond-planner#63
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
for current single-tenant usage the risk is negligible, but for wider rollout this is a massive security issue
clubs deactivated via PB API rule, needs more thorough testing and preferably Go test