[Expo-tech] Bug in access control - troggle django

[Philip Sargent (Gmail)]

I tried the cave data entry procedure from Tor to see what credentials I
needed to set up 
so that I could document it.

I discovered that no credentials whatsoever are required to 
edit existing caves using  the online forms, not even the "expo" |
"{cavey}:{beery}" credentials.

Something wrong in the Django setup?

I tried it on the public server http://expo.survex.com