patricklam/judodb-backend — pull request #4 by xnoumbis (2014-11-21 19:37:38+00:00)
Title: This fixes issue 29 from https://github.com/patricklam/JudoDB:

This php only currently checks that the user is logged in;
it needs to check that the logged-in user has access to the
client being requested (must have a services entry with a
club_id that intersects the logged in user and the user_club table).
modified: pull_one_client.php