Category Update & Delete Lack Permissions #9
Description
Currently anyone can update or delete a category. In both the createCategory controller and the Category model, we are creating a direct relation between the category and the user.
This raises the following questions:
- How and when are we going to use this relation?
- Is this part of the overall design and idea or would you like to restrict it?
- What would happen in these controllers if someone made a change to the category? Are we going to restrict them, or leave it open for everyone?