In the current design, both admin and user login functions are separate (using the boolean parameter), but there's no persistent state that indicates which type of user is logged in. Due to this, anybody can tamper with the status of the complaints.
I believe this issue to be at least medium in difficulty, but I trust the maintainers to label this issue accordingly.
In the current design, both admin and user login functions are separate (using the boolean parameter), but there's no persistent state that indicates which type of user is logged in. Due to this, anybody can tamper with the status of the complaints.
I believe this issue to be at least medium in difficulty, but I trust the maintainers to label this issue accordingly.