onepercentclub/bluebottle — pull request #1154 by rollick (2014-11-12 11:16:20+00:00)
Title: Fixes for donation api permissions

- only allow order/donation creation if the order belongs to current user or their is no user defined (anonymous)