From 6630b4892ae3ab6e211a0a1699ce66583e54796a Mon Sep 17 00:00:00 2001
From: BonfaceKilz
Date: Wed, 18 May 2022 11:50:06 +0300
Subject: Require edit rights to access the case-attributes page

* wqflask/wqflask/metadata_edits.py (update_case_attributes): Add
"login_required" and "edit_admins_access_required" decorators.
---
 wqflask/wqflask/metadata_edits.py | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'wqflask')

diff --git a/wqflask/wqflask/metadata_edits.py b/wqflask/wqflask/metadata_edits.py
index 664e441c..d38c34c4 100644
--- a/wqflask/wqflask/metadata_edits.py
+++ b/wqflask/wqflask/metadata_edits.py
@@ -738,6 +738,8 @@ def show_case_attribute_columns():
 
 
 @metadata_edit.route("/case-attributes", methods=("POST",))
+@edit_admins_access_required
+@login_required
 def update_case_attributes():
     data_ = request.form.to_dict()
     if data_:
-- 
cgit v1.2.3