darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-09 07:23:12 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3027 from alphagov/add-permissions-to-missing-page

Browse Source 
Fix a bug were the user_has_permission.
This commit is contained in:
Chris Hill-Scott
2019-06-27 12:40:47 +01:00
committed by GitHub
parent 149003c52c 21c23c276f
commit c260816213
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/main/views/api_keys.py
View File

@@ -169,6 +169,7 @@ def check_token_against_dummy_bearer(token):
@main.route("/services/<service_id>/api/callbacks", methods=['GET']) @main.route("/services/<service_id>/api/callbacks", methods=['GET'])
@login_required @login_required
@user_has_permissions('manage_api_keys')
def api_callbacks(service_id): def api_callbacks(service_id):
if not current_service.has_permission('inbound_sms'): if not current_service.has_permission('inbound_sms'):
return redirect(url_for('.delivery_status_callback', service_id=service_id)) return redirect(url_for('.delivery_status_callback', service_id=service_id))
@@ -193,6 +194,7 @@ def get_delivery_status_callback_details():
@main.route("/services/<service_id>/api/callbacks/delivery-status-callback", methods=['GET', 'POST']) @main.route("/services/<service_id>/api/callbacks/delivery-status-callback", methods=['GET', 'POST'])
@login_required @login_required
@user_has_permissions('manage_api_keys')
def delivery_status_callback(service_id): def delivery_status_callback(service_id):
delivery_status_callback = get_delivery_status_callback_details() delivery_status_callback = get_delivery_status_callback_details()
back_link = ( back_link = (
@@ -255,6 +257,7 @@ def get_received_text_messages_callback():
@main.route("/services/<service_id>/api/callbacks/received-text-messages-callback", methods=['GET', 'POST']) @main.route("/services/<service_id>/api/callbacks/received-text-messages-callback", methods=['GET', 'POST'])
@login_required @login_required
@user_has_permissions('manage_api_keys')
def received_text_messages_callback(service_id): def received_text_messages_callback(service_id):
if not current_service.has_permission('inbound_sms'): if not current_service.has_permission('inbound_sms'):
return redirect(url_for('.api_integration', service_id=service_id)) return redirect(url_for('.api_integration', service_id=service_id))