Added missing authentication decorators on calls that modify the

templates database table
pull/437/head
Christopher Usher 3 weeks ago committed by Mike Lang
parent 33f3b0e0c8
commit 2c5e1058e8

@ -670,6 +670,7 @@ def validate_template(new_template):
@app.route('/thrimshim/add-template', methods=['POST']) @app.route('/thrimshim/add-template', methods=['POST'])
@request_stats @request_stats
@authenticate_artist
def add_template(artist=None): def add_template(artist=None):
"""Add a template to the database""" """Add a template to the database"""
columns, message, code = validate_template(flask.request.json) columns, message, code = validate_template(flask.request.json)
@ -700,6 +701,7 @@ def add_template(artist=None):
@app.route('/thrimshim/update-template/<name>', methods=['POST']) @app.route('/thrimshim/update-template/<name>', methods=['POST'])
@request_stats @request_stats
@authenticate_artist
def update_template(name, artist=None): def update_template(name, artist=None):
"""Update a template in the database""" """Update a template in the database"""
columns, message, code = validate_template(flask.request.json) columns, message, code = validate_template(flask.request.json)

Loading…
Cancel
Save