Node Based Access Control Broken #9
Description
I discovered that the door/node based access control restrictions were not working properly. If you give access to one person to one door, it actually will give them access to all doors.
This is due to the fact that the SQL in database.py:221 does not include a where statement to limit the access search to this particular node. Should just need "node_id=? AND" to the where statement to make the search more accurate.