PT-2026-63792

The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...