How to avoid others cancel the drone job?


#1

Drone 0.7 is used, is there any way to only let administrator to cancel the build job in the web console?


#2

I was looking at the code trying to learn more about how Drone works, and it looks like the cancel endpoint is accessible to anyone with write access to the repository. See https://github.com/drone/drone/blob/master/handler/api/api.go#L175:L176