Skip to content

Conversation

@int2001
Copy link
Contributor

@int2001 int2001 commented Dec 13, 2025

The best Grant-concept doesn't work if it's bypassable by API.

This PR fixes the following things:

  • Force Operator to Club-OP if it's a Member or ADIF-Member at logging. Officer and normal User aren't affected
  • more coming

@int2001 int2001 added this to the 2.2.2 milestone Dec 13, 2025
@int2001 int2001 added bug Something isn't working security Security related API stuff which affects the Wavelog API labels Dec 13, 2025
@int2001 int2001 marked this pull request as ready for review December 13, 2025 07:55
Copy link
Contributor

@phl0 phl0 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested and works. Location can only be created for auth level club officer.

@int2001 int2001 merged commit cfbd67a into wavelog:dev Dec 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

API stuff which affects the Wavelog API bug Something isn't working security Security related

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants