Skip to content

Conversation

@Brunner-Leo
Copy link
Contributor

No description provided.

@Brunner-Leo Brunner-Leo requested a review from m-herold August 16, 2021 18:39
Copy link
Member

@m-herold m-herold left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please also check this on the server-side. POST rest/timesheet/latest/updateTotalTargetHours/ID should only be accessible by timesheet admins.

@Brunner-Leo
Copy link
Contributor Author

Sorry, i put this in ATLDEV-331, because it was easier for me than changing things in the same files in three different issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants