ContributionFormMixin: `get_form_kwargs` does not handle anonymous user
grouprise/features/contributions/view_mixins.py#L25 accesses request.user.gestalt
without verifying, that request.user
is not None
.
Maybe this could be prevented by adding a rule/permission for viewing the contribution?
Currently GET requests simply rely on super().has_permission()
.