Merge pull request #124 from alphagov/fix_user_service_permissions_url

Fix url for user service permissions.
This commit is contained in:
Rebecca Law
2016-03-03 11:41:45 +00:00

View File

@@ -166,7 +166,7 @@ def get_user(user_id=None):
return jsonify(data=result.data)
@user.route('/<int:user_id>/<service_id>/permission', methods=['POST'])
@user.route('/<int:user_id>/service/<service_id>/permission', methods=['POST'])
def set_permissions(user_id, service_id):
# TODO fix security hole, how do we verify that the user
# who is making this request has permission to make the request.