Leo Hemsted d56b7b9a58 block inactive services from making stateful changes ...

in the NotifyAdminAPIClient, which all api traffic goes through, return
403 for any stateful requests (post, put and delete), if the following
criteria have been met:
* a current_service is set
    (this prevents checks being carried out on non-service related
     updates, eg editing user details)
* the service is not active
* the current user is not a platform admin

so platform admins can still update anything.

Note: Without any specific error handling, the user will see a generic
403 page. This is fine, probably - it's a relatively niche case that
you'll be editing a service you can't get to anyway

2016-12-09 16:09:42 +00:00

..

__init__.py

block inactive services from making stateful changes

2016-12-09 16:09:42 +00:00

api_key_api_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

events_api_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

invite_api_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

job_api_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

models.py

Send an email to the user when they change email address

2016-10-13 17:05:37 +01:00

notification_api_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

organisations_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

provider_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

service_api_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

status_api_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

template_statistics_api_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00

user_api_client.py

Use the local APIClient rather than the one from the python-api-client

2016-11-30 17:01:44 +00:00