mirror of
https://github.com/GSA/notifications-api.git
synced 2025-12-24 01:11:38 -05:00
Merge pull request #124 from alphagov/fix_user_service_permissions_url
Fix url for user service permissions.
This commit is contained in:
@@ -166,7 +166,7 @@ def get_user(user_id=None):
|
||||
return jsonify(data=result.data)
|
||||
|
||||
|
||||
@user.route('/<int:user_id>/<service_id>/permission', methods=['POST'])
|
||||
@user.route('/<int:user_id>/service/<service_id>/permission', methods=['POST'])
|
||||
def set_permissions(user_id, service_id):
|
||||
# TODO fix security hole, how do we verify that the user
|
||||
# who is making this request has permission to make the request.
|
||||
|
||||
Reference in New Issue
Block a user