RemoveProjectBackground previously used checkProjectBackgroundRights which only checks CanRead, allowing read-only users to delete project backgrounds. Added checkProjectBackgroundWriteRights that checks CanUpdate and use it in RemoveProjectBackground. Ref: GHSA-564f-wx8x-878h |
||
|---|---|---|
| .. | ||
| handler | ||
| unsplash | ||
| upload | ||
| background.go | ||