trustchain-oc1-orchestral/devicehub-teal
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Check snapshot permissions only when it comes from Workbench

Browse source
This commit is contained in:
nad 2020-08-17 16:30:11 +02:00
parent 8c493da370
commit 0bfc08f81f
1 changed files with 4 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
ereuse_devicehub/resources/action/views.py
View file

@ -77,10 +77,6 @@ class ActionView(View):
assert all(not c.actions_one for c in components) if components else True assert all(not c.actions_one for c in components) if components else True
db_device, remove_actions = resource_def.sync.run(device, components) db_device, remove_actions = resource_def.sync.run(device, components)
# Check ownership of (non-component) device to from current.user
if(db_device.owner_id != g.user.id):
raise InsufficientPermission()
del device # Do not use device anymore del device # Do not use device anymore
snapshot.device = db_device snapshot.device = db_device
snapshot.actions |= remove_actions | actions_device # Set actions to snapshot snapshot.actions |= remove_actions | actions_device # Set actions to snapshot
@ -95,8 +91,11 @@ class ActionView(View):
component.actions_one |= actions component.actions_one |= actions
snapshot.actions |= actions snapshot.actions |= actions
# Compute ratings
if snapshot.software == SnapshotSoftware.Workbench: if snapshot.software == SnapshotSoftware.Workbench:
# Check ownership of (non-component) device to from current.user
if db_device.owner_id != g.user.id:
raise InsufficientPermission()
# Compute ratings
try: try:
rate_computer, price = RateComputer.compute(db_device) rate_computer, price = RateComputer.compute(db_device)
except CannotRate: except CannotRate: