Party Notes Potential Security Hole

[Adrian Crum-2]

I might have missed something, but it appears to me there is no permission checking done when creating a party note. Is there a reason for that?

-Adrian



     

[Jacques Le Roux]

I vaguely remember someone has changed something with notes recently (Hans, Anil?). To allow creating a note not only by the current
logged in user, but I could be wrong because I can't find anything related...

Jacques

From: "Adrian Crum" <[hidden email]>
>I might have missed something, but it appears to me there is no permission checking done when creating a party note. Is there a
>reason for that?
>
> -Adrian