Restrict access to edit route

2019-07-30 14:24:07 -04:00 · 2019-07-30 14:24:07 -04:00 · 8edfd1c355
commit 8edfd1c355
parent 581b55b2eb
1 changed files with 1 additions and 0 deletions
--- a/atst/routes/task_orders/new.py
+++ b/atst/routes/task_orders/new.py
@ -57,6 +57,7 @@ def update_task_order(


@task_orders_bp.route("/task_orders/<task_order_id>/edit")
+@user_can(Permissions.CREATE_TASK_ORDER, message="edit task order form")
 def edit(task_order_id):
    task_order = TaskOrders.get(task_order_id)