gordon-morehouse/share2grandma — pull request #30 by georgedorn (2013-11-17 05:23:38+00:00)
Title: Creating a recipient belongs to logged-in-user, cannot CRUD recipients o...

...r subscriptions you don't own in some fashion, tests of same.

This may need some manual testing. I extended test coverage a bunch, but lost track of all of the possible ways permissions could be borked.