mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-08-23 15:57:23 -04:00
Fix 500s when requesting json after logged out:
* Update permissions decorator to make sure user is logged in first, else 401 * Stop further ajax json calls on failure
This commit is contained in:
@@ -26,7 +26,7 @@
|
|||||||
).done(
|
).done(
|
||||||
response => flushQueue(queue, response)
|
response => flushQueue(queue, response)
|
||||||
).fail(
|
).fail(
|
||||||
() => clearQueue(queue)
|
() => poll = function(){}
|
||||||
);
|
);
|
||||||
|
|
||||||
setTimeout(
|
setTimeout(
|
||||||
|
|||||||
15
app/utils.py
15
app/utils.py
@@ -42,11 +42,18 @@ def user_has_permissions(*permissions, admin_override=False, any_=False):
|
|||||||
@wraps(func)
|
@wraps(func)
|
||||||
def wrap_func(*args, **kwargs):
|
def wrap_func(*args, **kwargs):
|
||||||
from flask_login import current_user
|
from flask_login import current_user
|
||||||
if current_user and current_user.has_permissions(permissions=permissions,
|
|
||||||
admin_override=admin_override, any_=any_):
|
if current_user and current_user.is_authenticated:
|
||||||
return func(*args, **kwargs)
|
if current_user.has_permissions(
|
||||||
|
permissions=permissions,
|
||||||
|
admin_override=admin_override,
|
||||||
|
any_=any_
|
||||||
|
):
|
||||||
|
return func(*args, **kwargs)
|
||||||
|
else:
|
||||||
|
abort(403)
|
||||||
else:
|
else:
|
||||||
abort(403)
|
abort(401)
|
||||||
return wrap_func
|
return wrap_func
|
||||||
return wrap
|
return wrap
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user