changeset 2677:fded75e578be

Fixes #415, any logged in user can access trash by typing localhost:8080/+admin/all/trash; thanks kumar risabh
author RogerHaase <haaserd@gmail.com>
date Sun, 20 Jul 2014 15:11:38 -0700
parents 27cbb9d8f08c
children 80f8ef6e4087
files MoinMoin/apps/admin/views.py
diffstat 1 files changed, 1 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/MoinMoin/apps/admin/views.py	Sun Jul 20 15:10:31 2014 -0700
+++ b/MoinMoin/apps/admin/views.py	Sun Jul 20 15:11:38 2014 -0700
@@ -238,6 +238,7 @@
 
 @admin.route('/trash', defaults=dict(namespace=NAMESPACE_DEFAULT), methods=['GET'])
 @admin.route('/<namespace>/trash')
+@require_permission(SUPERUSER)
 def trash(namespace):
     """
     Returns the trashed items.