sachet/sachet-server
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

anon users are now allowed in admin endpoints

Browse Source
This commit is contained in:
dogeystamp 2023-06-13 11:44:58 -04:00
parent 404393859b
commit b525f09487
Signed by: dogeystamp
GPG Key ID: 7225FE3592EFFA38
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
sachet/server/admin/views.py
View File

@ -9,17 +9,17 @@ admin_blueprint = Blueprint("admin_blueprint", __name__)
class ServerSettingsAPI(ModelAPI): class ServerSettingsAPI(ModelAPI):
@auth_required(required_permissions=(Permissions.ADMIN,)) @auth_required(required_permissions=(Permissions.ADMIN,), allow_anonymous=True)
def get(self, auth_user=None): def get(self, auth_user=None):
settings = get_settings() settings = get_settings()
return super().get(settings) return super().get(settings)
@auth_required(required_permissions=(Permissions.ADMIN,)) @auth_required(required_permissions=(Permissions.ADMIN,), allow_anonymous=True)
def patch(self, auth_user=None): def patch(self, auth_user=None):
settings = get_settings() settings = get_settings()
return super().patch(settings) return super().patch(settings)
@auth_required(required_permissions=(Permissions.ADMIN,)) @auth_required(required_permissions=(Permissions.ADMIN,), allow_anonymous=True)
def put(self, auth_user=None): def put(self, auth_user=None):
settings = get_settings() settings = get_settings()
return super().put(settings) return super().put(settings)

4
sachet/server/users/views.py
View File

@ -197,12 +197,12 @@ users_blueprint.add_url_rule(
class UserListAPI(ModelListAPI): class UserListAPI(ModelListAPI):
@auth_required(required_permissions=(Permissions.ADMIN,)) @auth_required(required_permissions=(Permissions.ADMIN,), allow_anonymous=True)
def post(self, auth_user=None): def post(self, auth_user=None):
data = request.get_json() data = request.get_json()
return super().post(User, data) return super().post(User, data)
@auth_required(required_permissions=(Permissions.ADMIN,)) @auth_required(required_permissions=(Permissions.ADMIN,), allow_anonymous=True)
def get(self, auth_user=None): def get(self, auth_user=None):
return super().get(User) return super().get(User)