djmailhot/BeatTide — Issue #52: Insecure page requests
Author: mwinstanley
Created: 2012-02-26 05:34:59+00:00
State: open
Labels: Bug, Priority: MED

We don't check for authorization before performing things like deleting a user, creating a user, deleting random subscriptions, etc. We should make sure that these functions cannot be requested by constructing POST/GET/DELETE/PUT requests.