flo/nsupdate.info
1
0
Fork 0
Code Issues 1 Pull Requests 2 Packages Releases Activity

update CHANGES, fix typo in comment

Browse Source
This commit is contained in:
Thomas Waldmann 2014-09-12 21:11:55 +02:00
parent 6fc1f64698
commit 3da3d82eb4
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGES.rst
View File

@ -21,6 +21,7 @@ New Features:
Fixes:
* fix security issue: abuse_blocked flag could be worked around by abuser
* refactored internal api so host/zone boundary is not lost and does not need
to be discovered (we KNOW it) - fixes issues #122 and #138.
* fixed tests so they behave on travis-ci

2
nsupdate/main/views.py
View File

@ -281,7 +281,7 @@ class DeleteHostView(DeleteView):
obj = super(DeleteHostView, self).get_object(*args, **kwargs)
if (obj.created_by != self.request.user or obj.abuse_blocked):
# disallow deletion if abuse_blocked is set, otherwise the
# abuser can just delete and recreate the host)
# abuser can just delete and recreate the host
raise PermissionDenied() # or Http404
return obj