Alexey Bezhan 35fb92c02c Replace sevice api client get template calls with Service methods ...

Instead of using the API client directly views are now calling one
of two Service model methods:

`get_template` is used for view actions, where the user should see
the template page even if they don't have access to the template
folder (since all templates are still inked from the dashboard or
the sent notifications pages).

`get_template_with_user_permission_or_403` will check if the user
has access to the template's folder first and return 403 otherwise.
This method is used for any endpoints that result in an action: editing
template attributes, deleting templates or sending messages.

2019-04-01 10:50:38 +01:00

104 KiB

Raw Blame History

View Raw