nokiadatagathering/ndg-ng — Issue #10: User authentication
Author: IanLawrence
Created: 2011-12-05 18:43:20+00:00
State: open
Labels: Release critical

Any user can send a survey back from a phone that was not sent for them.

For example Survey 1 on the server is sent to the user admin and then the user John gets the device of admin which contains survey 1. He can create a new result and send that result to the server with his credentials (not admins) and it works