aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBonfaceKilz2022-05-18 11:50:06 +0300
committerBonfaceKilz2022-05-27 15:17:52 +0300
commit6630b4892ae3ab6e211a0a1699ce66583e54796a (patch)
tree9d09499b1aa3a0698397552342a84b842971b3f7
parentdbf175419de9699d704a172b2be2da19c942fcda (diff)
downloadgenenetwork2-6630b4892ae3ab6e211a0a1699ce66583e54796a.tar.gz
Require edit rights to access the case-attributes page
* wqflask/wqflask/metadata_edits.py (update_case_attributes): Add "login_required" and "edit_admins_access_required" decorators.
-rw-r--r--wqflask/wqflask/metadata_edits.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/wqflask/wqflask/metadata_edits.py b/wqflask/wqflask/metadata_edits.py
index 664e441c..d38c34c4 100644
--- a/wqflask/wqflask/metadata_edits.py
+++ b/wqflask/wqflask/metadata_edits.py
@@ -738,6 +738,8 @@ def show_case_attribute_columns():
@metadata_edit.route("/case-attributes", methods=("POST",))
+@edit_admins_access_required
+@login_required
def update_case_attributes():
data_ = request.form.to_dict()
if data_: