NunoSempere/calibre-web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'sec_fixes/admin_update' into master

Browse Source
This commit is contained in:
Ozzieisaacs 2020-10-31 20:02:42 +01:00
commit 130701a7bb
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cps/admin.py
View File

@ -1029,7 +1029,8 @@ def send_logfile(logtype):
@admi.route("/get_update_status", methods=['GET']) @admi.route("/get_update_status", methods=['GET'])
@login_required_if_no_ano @login_required
@admin_required
def get_update_status(): def get_update_status():
log.info(u"Update status requested") log.info(u"Update status requested")
return updater_thread.get_available_updates(request.method, locale=get_locale()) return updater_thread.get_available_updates(request.method, locale=get_locale())

1
cps/web.py
View File

@ -308,6 +308,7 @@ def before_request():
@app.route('/import_ldap_users') @app.route('/import_ldap_users')
@login_required @login_required
@admin_required
def import_ldap_users(): def import_ldap_users():
showtext = {} showtext = {}
try: try: