techcollective/mercury — Issue #99: deposit action should check permissions
Author: 3point2
Created: 2012-01-16 17:23:06+00:00
State: open
Labels: 0.2, defect

namely for accounts.add_deposit

haven't verified that someone without permissions to create a deposit can do so anyway, but i'm sure they can.

it would also make sense to hide the option from the list when not available.

also, removing a deposited payment from a deposit should check for change_deposit