Security Notes

Admin users

It is currently possible to create admin users by providing a password as the "role" attribute for the user being registered (this can be seen in UserController). Additionally, an admin-user is registered as part of the start-up of the project. This is done for academic purposes, as this project is part of a submission for a class project. It is vital that this is changed/removed if the project is used in a production environment. The group does not recommend using this project as a basis for a production environment.