Security issue with User-Restricted Resource Access
Security issue with User-Restricted Resource Access

I found a security issue, the query should be updated with the auth_username_field even when a GET with no parameters is performed, a user should only see the items he created.
jzorrof/eve,superdesk/eve,elpoisterio/eve,hustlzp/eve,EasonYi/eve,stratosgear/eve,bcrochet/eve,kidaa/eve,matthieuprat/eve,kalbasit/eve,yanyanqin/eve,julianhille/eve,pjs7678/eve,mugurrus/eve,opticode/eve,amagdas/eve,eduardomb/eve,kynan/eve,sebest/eve,mcreenan/eve