darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-06 10:18:25 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add user permission check to template folder actions

Browse Source
This commit is contained in:
Alexey Bezhan
2019-03-20 17:26:51 +00:00
parent 792b625de7
commit bfe6768796
4 changed files with 22 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
app/models/service.py
View File

@@ -174,17 +174,22 @@ class Service():
def get_template(self, template_id, version=None):
return service_api_client.get_service_template(self.id, str(template_id), version)['data']
def get_template_with_user_permission_or_403(self, template_id, user):
template = self.get_template(template_id)
def get_template_folder_with_user_permission_or_403(self, folder_id, user):
template_folder = self.get_template_folder(folder_id)
if not self.has_permission("edit_folder_permissions"):
return template
template_folder = self.get_template_folder(template["folder"])
return template_folder
if not user.has_template_folder_permission(template_folder):
abort(403)
return template_folder
def get_template_with_user_permission_or_403(self, template_id, user):
template = self.get_template(template_id)
self.get_template_folder_with_user_permission_or_403(template['folder'], user)
return template
@property