Contact Data Accessible By Other Users

Create issue
Issue #1205 resolved
Dinh Bowman created an issue

I discovered a situation during testing that linked one authenticated user's info with a different user's contact info. Looking at the ContactManager's from_request function, it didn't seem to function as I might expect and thus I modifications shown in the diff. I believe this addresses the issue.

Comments (2)

  1. Dinh Bowman reporter

    I've started a fork (satchmo-dinh) which includes this fix in an attempt to streamline my contributions.

  2. Log in to comment