docbrown/app/views/internal/configs
Vaidehi Joshi c33d6936b5
Do not allow staff_user_id to be mutated (#6009) [deploy]
Allowing ids to be mutated by admins from the /internal/config pages is dangerous.
This could cause issues if an admin tries to update the SiteConfig.staff_user_id to an id that is another user's id, or to an id that isn't valid.
2020-02-10 16:35:18 -08:00
..
show.html.erb Do not allow staff_user_id to be mutated (#6009) [deploy] 2020-02-10 16:35:18 -08:00