Can set due date through slash commands even though I'm not authorized to
Summary
- Post this bug
- type
/due tomorrow
in the comment box - See a due date be accepted even though I don't have access to do so on this project
Expected behavior
ACCESS DENIED
Actual behavior
Due date is set
Relevant logs and/or screenshots
See #22591 (closed) where I tried this because I was curious