aboutsummaryrefslogtreecommitdiff
path: root/gn2/wqflask
diff options
context:
space:
mode:
authorMunyoki Kilyungi2024-03-22 23:42:29 +0300
committerBonfaceKilz2024-03-26 10:01:13 +0300
commit1f71672c6eb57e64299afa415569ac64dcf4a152 (patch)
tree5e9915669946a79b912d68b48ac7b03fa6078f05 /gn2/wqflask
parentf16d079979cf84894892ab876421f64d9687e57c (diff)
downloadgenenetwork2-1f71672c6eb57e64299afa415569ac64dcf4a152.tar.gz
Use "require_oauth2_edit_resource_access" for edit/save endpoints.
Signed-off-by: Munyoki Kilyungi <me@bonfacemunyoki.com>
Diffstat (limited to 'gn2/wqflask')
-rw-r--r--gn2/wqflask/edit.py3
1 files changed, 3 insertions, 0 deletions
diff --git a/gn2/wqflask/edit.py b/gn2/wqflask/edit.py
index 36028861..8e64ad41 100644
--- a/gn2/wqflask/edit.py
+++ b/gn2/wqflask/edit.py
@@ -15,6 +15,7 @@ from flask import (Blueprint,
request)
from gn2.wqflask.oauth2.checks import require_oauth2
+from gn2.wqflask.oauth2.checks import require_oauth2_edit_resource_access
metadata = Blueprint("metadata", __name__)
@@ -55,6 +56,7 @@ push origin master --dry-run".split(" ")))
@metadata.route("/edit")
+@require_oauth2_edit_resource_access
@require_oauth2
def metadata_edit():
from gn2.utility.tools import GN3_LOCAL_URL
@@ -79,6 +81,7 @@ def metadata_edit():
@metadata.route("/save", methods=["POST"])
+@require_oauth2_edit_resource_access
@require_oauth2
def save():
from gn2.utility.tools import get_setting