altf4arnold/datatracker
1
0
Fork 0
Code Issues Pull requests Actions 3 Packages Projects Releases Wiki Activity

Changed the API to not export saved Message instances (they can contain information such as draft confirmation codes and password reset codes that should not be generally visible).

Browse source 
- Legacy-Id: 18375
This commit is contained in:
Henrik Levkowetz 2020-08-15 09:37:05 +00:00
parent 50d559f05f
commit f93270e0f6
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
ietf/message/resources.py
View file

@ -22,7 +22,7 @@ class MessageResource(ModelResource):
related_docs = ToManyField(DocumentResource, 'related_docs', null=True) related_docs = ToManyField(DocumentResource, 'related_docs', null=True)
class Meta: class Meta:
cache = SimpleCache() cache = SimpleCache()
queryset = Message.objects.all() queryset = Message.objects.none()
serializer = api.Serializer() serializer = api.Serializer()
#resource_name = 'message' #resource_name = 'message'
ordering = ['id', ] ordering = ['id', ]
@ -69,7 +69,7 @@ api.message.register(SendQueueResource())
class MessageAttachmentResource(ModelResource): class MessageAttachmentResource(ModelResource):
message = ToOneField(MessageResource, 'message') message = ToOneField(MessageResource, 'message')
class Meta: class Meta:
queryset = MessageAttachment.objects.all() queryset = MessageAttachment.objects.none()
serializer = api.Serializer() serializer = api.Serializer()
cache = SimpleCache() cache = SimpleCache()
#resource_name = 'messageattachment' #resource_name = 'messageattachment'