Pillai, Padmanabhan S wrote:
Hi Michael,
Is this functionality limited to administrators or can anyone do this? It
seems it should be a limited access, privileged operation. Is there any
mechanism in the client for access control (I guess there is a limited form
with the user ids, though it is easy to override).
Hi Babu,
Yes, right now anyone can do this. It should be limited to admins. There
is currently insufficient enforcement of privileges, and to top it off,
what few there are happen in the client.
Greetings,
Michael.
