Hacker News new | ask | show | jobs
by pfg_ 462 days ago
In this case they had permissiona set up - but your application status was stored in the same object as the rest of the info you could modify, and you were allowed to read and write to it.