mirror of
https://github.com/GSA/notifications-api.git
synced 2026-02-01 07:35:34 -05:00
Refactor stuff + stricter validation for updating only ALLOWED user attrs
This commit is contained in:
@@ -110,8 +110,9 @@ class UserUpdateAttributeSchema(BaseSchema):
|
||||
class Meta:
|
||||
model = models.User
|
||||
exclude = (
|
||||
"updated_at", "created_at", "user_to_service",
|
||||
"_password", "verify_codes")
|
||||
'id', 'updated_at', 'created_at', 'user_to_service',
|
||||
'_password', 'verify_codes', 'logged_in_at', 'password_changed_at',
|
||||
'failed_login_count', 'state', 'platform_admin')
|
||||
strict = True
|
||||
|
||||
@validates('name')
|
||||
|
||||
Reference in New Issue
Block a user