darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-24 16:24:08 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3969 from alphagov/fix-suspend-archive-perm-178770416

Browse Source 
Fix backend permissions for stopping services
This commit is contained in:
Ben Thorner
2021-07-15 09:29:20 +01:00
committed by GitHub
parent 9d4095074d 96a87e7cf2
commit 9170c0b175
2 changed files with 27 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/main/views/service_settings.py
View File

@@ -424,7 +424,7 @@ def service_confirm_broadcast_account_type(service_id, account_type):
@main.route("/services/<uuid:service_id>/service-settings/archive", methods=['GET', 'POST'])
@user_has_permissions('manage_service')
def archive_service(service_id):
if not current_service.active and (
if not current_service.active or not (
current_service.trial_mode or current_user.platform_admin
):
abort(403)
@@ -450,7 +450,7 @@ def archive_service(service_id):
@main.route("/services/<uuid:service_id>/service-settings/suspend", methods=["GET", "POST"])
@user_has_permissions('manage_service')
@user_is_platform_admin
def suspend_service(service_id):
if request.method == 'POST':
service_api_client.suspend_service(service_id)
@@ -463,7 +463,7 @@ def suspend_service(service_id):
@main.route("/services/<uuid:service_id>/service-settings/resume", methods=["GET", "POST"])
@user_has_permissions('manage_service')
@user_is_platform_admin
def resume_service(service_id):
if request.method == 'POST':
service_api_client.resume_service(service_id)