Skip to content

Potentially missing authorization check in CreateTournamentEndpoint #336

@eliaspr

Description

@eliaspr

If a tournament is created with an existing folder, there currently is no authorization check whether the requesting user has write permissions for that folder. This check should most likely be added.

Metadata

Metadata

Assignees

Labels

identityThis issue is related to the identity / access control system

Type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions