Fixed
Project expenses and phases can no longer be edited through another project
about 10 hours ago by ReadMe API
PATCH /projects/{projectId}/other-expenses/{otherExpenseId} and PATCH /projects/{projectId}/phases/{phaseId} now check that the expense or phase belongs to the project in the path. Requests that pair a project with an expense or phase from a different project return 404 instead of updating the record.