Chris Hill-Scott 3da9e84ece Enforce order of permissions decorators ...

At the moment we mostly have `user_has_permissions` execute first. It
shouldn’t matter, but it feels right for us to check that a user is
logged in before we check their permissions to a service. Otherwise a
malicious user could (maybe) check if a service ID belongs to a real
service, and go on to do something malicious with that information.

This commit adds some extra test code to enforce that the order is
always the same.

N.B. decorators in Python execute from closest to furthest (from the
line on which the function is defined).

2019-07-03 09:54:17 +01:00

..

views

Ensure all service route have permission decorators

2019-07-03 09:47:20 +01:00

__init__.py

…

test_asset_fingerprinter.py

…

test_choose_time_form.py

…

test_create_api_key_form.py

…

test_errorhandlers.py

…

test_errors_for_csv.py

…

test_formatters.py

…

test_permissions.py

Enforce order of permissions decorators

2019-07-03 09:54:17 +01:00

test_placeholder_form.py

…

test_request_header.py

…

test_service_contact_details_form.py

…

test_strip_whitespace_form.py

…

test_two_factor_form.py

…

test_validators.py

…