altf4arnold/datatracker
1
0
Fork 0
Code Issues Pull requests Actions 3 Packages Projects Releases Wiki Activity

Ensure that 'get full url', 'approve' and 'force' views are called via POST request. See #650

Browse source 
- Legacy-Id: 3062
This commit is contained in:
Emilio A. Sánchez López 2011-04-26 14:35:07 +00:00
parent 8239d6bb80
commit 23d0ddf7e4
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
ietf/submit/views.py
View file

@ -220,6 +220,8 @@ def draft_confirm(request, submission_id, auth_key):
def draft_approve(request, submission_id, check_function=_can_approve):
if request.method!='POST':
return HttpResponseNotAllowed(['POST'])
detail = get_object_or_404(IdSubmissionDetail, submission_id=submission_id)
can_perform = check_function(request.user, detail)
if not can_perform:
@ -231,10 +233,14 @@ def draft_approve(request, submission_id, check_function=_can_approve):
def draft_force(request, submission_id):
if request.method!='POST':
return HttpResponseNotAllowed(['POST'])
return draft_approve(request, submission_id, check_function=_can_force_post)
def full_url_request(request, submission_id):
if request.method!='POST':
return HttpResponseNotAllowed(['POST'])
detail = get_object_or_404(IdSubmissionDetail, submission_id=submission_id)
request_full_url(request, detail)
message = ('success', 'An email has been sent to draft authors to inform them of the full access url')