Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Sander

Sander

Bug reporter · Not a member

Sander's latest activity

Tuesday, October 07 2008
21 AASM, Stateful, any user can delete any other? was created in Restful Authentication
  • Sander
    Sander created the ticket at 6:23 PM

    Hi Guys,

    Creating the user and sessions with stateful or aasm generates a potentially unsafe default configuration. It allows any user that can login to destroy...