The Web API request creation endpoint does not properly validate an activity association.
If a request is created via the request creation endpoint, validation will not apply to enforce that the username on the request is associated with the specified activity ID.
Bug# 13748
0
votes
