Alexey Bezhan 36f41c23e1 Always use both folder and service ID when getting template folder ...

Currently there aren't any permission checks based on folder IDs in
the admin app or the API, so it's possible for a user to modify the
folder ID to perform operations on folders outside their service.

Our usual way to avoid this is to always use service_id filter when
fetching objects from the database.

2018-11-07 13:51:37 +00:00

..

accept_invite

…

authentication

Move proxy header check to auth-requiring endpoints

2018-03-27 17:37:09 +01:00

aws

Fixes to the delete letter notifications.

2018-08-13 14:09:51 +01:00

billing

Return postage from the monthly-usage endpoint

2018-10-03 13:07:46 +01:00

celery

Merge pull request #2182 from alphagov/add-more-information-to-log

2018-10-25 11:12:46 +01:00

clients

Remove monotonic

2018-05-04 10:56:51 +01:00

complaint

Paginate the function to get all complaints

2018-07-03 11:11:49 +01:00

dao

Always use both folder and service ID when getting template folder

2018-11-07 13:51:37 +00:00

delivery

Remove govuk from possible brands

2018-08-30 16:36:35 +01:00

dvla_organisation

…

email_branding

Add error handler for duplicate domain

2018-09-04 14:40:24 +01:00

events

…

inbound_number

…

inbound_sms

added new paginated inbound endpoint

2018-04-04 17:10:41 +01:00

invite

Undo the chnages to create_invited_user

2018-06-29 10:26:14 +01:00

job

Refuse to process invalid files

2018-04-30 11:47:27 +01:00

letters

make sure validation_failed notifications still return pdf

2018-10-17 16:09:30 +01:00

notifications

Allow the admin app to send one-off letters

2018-10-31 16:48:43 +00:00

organisation

…

performance_platform

…

platform_stats

Add schema and validate platform stats requests

2018-06-29 16:14:48 +01:00

provider_details

…

schema_validation

add template folder CRUD

2018-10-31 14:28:16 +00:00

service

Merge pull request #2211 from alphagov/fix_notification_statistics_on_dashboard

2018-11-06 16:22:00 +00:00

status

add status endpoint to '/'

2018-10-26 18:02:41 +01:00

template

Stop passing dvla_org_id to template preview

2018-10-23 15:52:44 +01:00

template_folder

Always use both folder and service ID when getting template folder

2018-11-07 13:51:37 +00:00

template_statistics

rename limit_days to whole_days on template statistics endpoint

2018-07-10 15:04:35 +01:00

user

add postage to notification + noti_history

2018-09-19 16:32:58 +01:00

v2

We were getting the page count for the letter before virus scan happened.

2018-10-16 15:08:15 +01:00

__init__.py

add template folder CRUD

2018-10-31 14:28:16 +00:00

.gitignore

…

cloudfoundry_config.py

…

commands.py

Update command to migrate data to ft_billing

2018-09-28 13:52:17 +01:00

config.py

remove dupes from cfg

2018-10-17 15:29:39 +01:00

encryption.py

…

errors.py

Add DAO function and endpoint for archiving email reply_to addresses

2018-04-30 15:25:17 +01:00

exceptions.py

Add DAO function and endpoint for archiving email reply_to addresses

2018-04-30 15:25:17 +01:00

history_meta.py

…

models.py

Merge pull request #2199 from alphagov/template-folder-crud

2018-11-01 10:44:48 +00:00

schemas.py

remove some pytest warnings

2018-10-26 17:54:53 +01:00

utils.py

Move code that escapes special chars to helper function and use it

2018-07-13 15:47:21 +01:00

variables.py

…

version.py.dist

…