NunoSempere/calibre-web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'sec_fixes/edit_auth' into master

Browse Source
This commit is contained in:
Ozzieisaacs 2020-10-31 20:04:12 +01:00
commit 00b422807b
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cps/editbooks.py
View File

@ -929,6 +929,7 @@ def convert_bookformat(book_id):
@editbook.route("/ajax/editbooks/<param>", methods=['POST']) @editbook.route("/ajax/editbooks/<param>", methods=['POST'])
@login_required_if_no_ano @login_required_if_no_ano
@edit_required
def edit_list_book(param): def edit_list_book(param):
vals = request.form.to_dict() vals = request.form.to_dict()
# calibre_db.update_title_sort(config) # calibre_db.update_title_sort(config)
@ -988,6 +989,7 @@ def get_sorted_entry(field, bookid):
@editbook.route("/ajax/simulatemerge", methods=['POST']) @editbook.route("/ajax/simulatemerge", methods=['POST'])
@login_required @login_required
@edit_required
def simulate_merge_list_book(): def simulate_merge_list_book():
vals = request.get_json().get('Merge_books') vals = request.get_json().get('Merge_books')
if vals: if vals:
@ -1003,6 +1005,7 @@ def simulate_merge_list_book():
@editbook.route("/ajax/mergebooks", methods=['POST']) @editbook.route("/ajax/mergebooks", methods=['POST'])
@login_required @login_required
@edit_required
def merge_list_book(): def merge_list_book():
vals = request.get_json().get('Merge_books') vals = request.get_json().get('Merge_books')
to_file = list() to_file = list()