Don't leak to non-admin users the current installed version
This commit is contained in:
parent
5792838333
commit
8b60a19577
|
@ -1029,7 +1029,8 @@ def send_logfile(logtype):
|
|||
|
||||
|
||||
@admi.route("/get_update_status", methods=['GET'])
|
||||
@login_required_if_no_ano
|
||||
@login_required
|
||||
@admin_required
|
||||
def get_update_status():
|
||||
log.info(u"Update status requested")
|
||||
return updater_thread.get_available_updates(request.method, locale=get_locale())
|
||||
|
|
Loading…
Reference in New Issue
Block a user