pk/atst
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check VIEW_WORKSPACE_MEMBERS permission

Browse Source
This commit is contained in:
richard-dds 2018-09-05 12:04:22 -04:00
parent 398bdac871
commit 29e6d2934f
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
atst/routes/workspaces.py
View File

@ -63,8 +63,14 @@ def show_workspace(workspace_id):
@bp.route("/workspaces/<workspace_id>/members")
def workspace_members(workspace_id):
workspace = Workspaces.get(g.current_user, workspace_id)
return render_template("workspaces/members/index.html", workspace=workspace)
user = g.current_user
workspace = Workspaces.get(user, workspace_id)
if not Authorization.has_workspace_permission(
user, workspace, Permissions.VIEW_WORKSPACE_MEMBERS
):
raise UnauthorizedError(user, "view workspace members")
return render_template("workspace_members.html", workspace=workspace)
@bp.route("/workspaces/<workspace_id>/reports")