Arbitrary user can cancel nft sale in nft-fixprice-sale.fc

[donjaron777]

Missing the check in L139:

throw_unless(458, equal_slices(sender_address, nft_owner_address) | equal_slices(sender_address, marketplace_address));

anybody can cancel sale in nft-fixprice-sale.fc

[stels-cs]

Yes, it is, but we do not use this version of the contract. nft-fixprice-sale-v2 used now