Refactor the submitter_required() function to check each request
This patch implements the check of the ownership of the case by the connected submitter account. If the user dont have access to the particular submission, a 403 will be returned. This function is cached for 15 minutes in the Redis cache.
Loading
Please register or sign in to comment