Commit Graph

2 Commits

Author SHA1 Message Date
luccioman
665d087d76 Enforced access controls on a few more administration pages.
- ensure use of HTTP POST method when performing server side effect
operations
 - transaction token required to ensure the request has effectively been
requested by user interaction
2017-04-03 12:20:16 +02:00
luccioman
09e72eb0a4 Set Config Portal as a private administration page.
Consistently with its required action from submission credentials, and
because external unauthenticated users do not need to access these
settings.
2017-04-03 11:34:49 +02:00