Alexey Bezhan 36f41c23e1 Always use both folder and service ID when getting template folder ...

Currently there aren't any permission checks based on folder IDs in
the admin app or the API, so it's possible for a user to modify the
folder ID to perform operations on folders outside their service.

Our usual way to avoid this is to always use service_id filter when
fetching objects from the database.

2018-11-07 13:51:37 +00:00

..

test_template_folder_rest.py

Always use both folder and service ID when getting template folder

2018-11-07 13:51:37 +00:00