-
Robert Lyon authored
A person can alter the viewid passed to the watchlist ajax update and so a user can end up watching a view they have no access to Change-Id: I21d00963ac3d9d53e337bcb0a7162bd2a1da1802 Signed-off-by: Robert Lyon <robertl@catalyst.net.nz>
ac25a2ba