From f93270e0f6db6d17f9fc0e30d987c9c8872fb65f Mon Sep 17 00:00:00 2001
From: Henrik Levkowetz <henrik@levkowetz.com>
Date: Sat, 15 Aug 2020 09:37:05 +0000
Subject: [PATCH] Changed the API to not export saved Message instances (they
 can contain information such as draft confirmation codes and password reset
 codes that should not be generally visible).  - Legacy-Id: 18375

---
 ietf/message/resources.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ietf/message/resources.py b/ietf/message/resources.py
index 30c7ac1e8..e6fe9a3eb 100644
--- a/ietf/message/resources.py
+++ b/ietf/message/resources.py
@@ -22,7 +22,7 @@ class MessageResource(ModelResource):
     related_docs     = ToManyField(DocumentResource, 'related_docs', null=True)
     class Meta:
         cache = SimpleCache()
-        queryset = Message.objects.all()
+        queryset = Message.objects.none()
         serializer = api.Serializer()
         #resource_name = 'message'
         ordering = ['id', ]
@@ -69,7 +69,7 @@ api.message.register(SendQueueResource())
 class MessageAttachmentResource(ModelResource):
     message          = ToOneField(MessageResource, 'message')
     class Meta:
-        queryset = MessageAttachment.objects.all()
+        queryset = MessageAttachment.objects.none()
         serializer = api.Serializer()
         cache = SimpleCache()
         #resource_name = 'messageattachment'