Ticket #181 (closed defect: fixed)
A user can edit a clinical trial of another user
|Reported by:||rafael.soares||Owned by:|
|Component:||Trialist||Severity:||major: data loss or major feature unusable|
|Estimated Hours:||4.0||Add Hours to Ticket:||0|
If the user changes the ID presented at URI, he can edit clinical trials that do not belong.
Note: See TracTickets for help on using tickets.