From f98ccf59ee91429ee71c82babbf5f82d2b5d357e Mon Sep 17 00:00:00 2001 From: Chris Ball Date: Fri, 16 May 2008 15:25:16 -0400 Subject: Require editbugs permission to edit bugs. Patch from j@oil21.org. --- Bugs-Everywhere-Web/beweb/controllers.py | 1 + 1 file changed, 1 insertion(+) (limited to 'Bugs-Everywhere-Web/beweb') diff --git a/Bugs-Everywhere-Web/beweb/controllers.py b/Bugs-Everywhere-Web/beweb/controllers.py index 8def76c..e3d555b 100644 --- a/Bugs-Everywhere-Web/beweb/controllers.py +++ b/Bugs-Everywhere-Web/beweb/controllers.py @@ -52,6 +52,7 @@ class Comment(PrestHandler): raise cherrypy.HTTPRedirect(comment_url(comment=reply_comment.uuid, **reply_data)) + @identity.require( identity.has_permission("editbugs")) @provide_action("action", "Update") def update(self, comment_data, comment, comment_body, *args, **kwargs): comment.body = comment_body -- cgit