concrexit issueshttps://gitlab.science.ru.nl/thalia/concrexit/-/issues2019-08-28T19:10:53+02:00https://gitlab.science.ru.nl/thalia/concrexit/-/issues/872Pizza orders reachable for people not in the organising member group2019-08-28T19:10:53+02:00Sébastiaan VersteegPizza orders reachable for people not in the organising member group### One-sentence description
Pizza orders reachable for people not in the organising member group
### Current behaviour / Reproducing the bug
1. Make a pizza event and add some orders
2. Your user should not be a superuser
3. Try to m...### One-sentence description
Pizza orders reachable for people not in the organising member group
### Current behaviour / Reproducing the bug
1. Make a pizza event and add some orders
2. Your user should not be a superuser
3. Try to mark the orders as paid in the frontend
4. Clicking doesn't do anything
### Expected behaviour
1. Make a pizza event and add some orders
2. Your user should not be a superuser
3. Try to mark the orders as paid in the frontend
4. The orders page is permission denied26Sébastiaan VersteegSébastiaan Versteeg