Merge branch 'timeslot-security-fix' into 'development'

Fix endpoint security on patch time slot

See merge request !805

src/main/java/nl/tudelft/queue/controller/TimeSlotController.java

@@ -52,6 +52,7 @@ public class TimeSlotController {
 	 * @param patch The updated timeslot data.
 	 */
 	@PatchMapping("/time-slot/{timeSlot}")
+	@PreAuthorize("@permissionService.canManageTimeSlot(#timeSlot)")
 	public @ResponseBody void patchTimeSlot(@PathEntity TimeSlot timeSlot,
 			@RequestBody TimeSlotPatchDTO patch) {
 		tss.patchTimeSlot(timeSlot, patch);
@@ -63,7 +64,7 @@ public class TimeSlotController {
 	 * @param id The id of the timeslot to remove.
 	 */
 	@DeleteMapping("/time-slot/{timeSlot}")
-	@PreAuthorize("@permissionService.canManageTimeSlot()")
+	@PreAuthorize("@permissionService.canManageTimeSlot(#timeSlot)")
 	public @ResponseBody void deleteTimeSlot(@PathEntity TimeSlot timeSlot) {
 		tss.deleteTimeSlot(timeSlot);
 	}