praekelt/vumi-go — pull request #568 by hodgestar (2013-08-02 15:11:07+00:00)
Title: Check that user has permission to access campaign in Go API

Currently any user who can login to the Go API can access any campaign id. This is a giant security hole.