Set count as live to false for broadcast services

We think it would be a security risk to show the name of services
involved in emergency alerts as they be responsible for things such as
counter terrorism.

On top of that, showing broadcast services in the list of all services
could enable someone to use that information to try and trick an admin
into letting them access of a particular service given the fact they
know the name of it
This commit is contained in:
David McDonald
2021-02-04 18:06:08 +00:00
parent 54b9d20f73
commit cdcbd1e238
3 changed files with 25 additions and 2 deletions

View File

@@ -162,7 +162,8 @@ def sample_broadcast_service(notify_db_session):
'restricted': False,
'email_from': email_from,
'created_by': user,
'crown': True
'crown': True,
'count_as_live': False,
}
service = Service.query.filter_by(name=service_name).first()
if not service: