alphagov/supplier-submission-portal — pull request #127 by TheDoubleK (2014-10-22 10:13:21+00:00)
Title: Ensure data segregation

See this story: https://www.agileplannerapp.com/boards/187120/cards/6349

I think this should do it - I've added a check that logged-in supplier-ID matches the supplier-ID for the listing for all 'save' methods in controllers and for the summary page display page (it was already there for question page displays).

What do you think? Is there any further checks/security we could add around this?