Skip to content

Handle update of present/payment fields separately

Ghost User requested to merge fix/organiser-api into master

Closes no issue

Previous behaviour

Steps to reproduce:

  1. Put/patch to http://<url>/api/v1/registrations/<id>/ without permissions
  2. Can change present/payment value of the registration

New behaviour

Steps to validate that it works:

  1. Put/patch to http://<url>/api/v1/registrations/<id>/ without permissions
  2. Cannot change present/payment value of the registration

Merge request reports

Loading