Description and Impact

LevelOne does not verify the scenario where the Principal add himself as a teacher using LevelOne :: addTeacher

This can be done if the Principal want to be eligible to receive more money from the school's budget ( the fees paid by students ) .

The Principal can receive the expected 5% and a % too from the dedicated 35% for the teachers .

Recommended mitigation

Make sure that the Principal can not add himself as a teacher within LevelOne :: addTeacher

PoC

There is not a PoC . The issue can be understood easily .