arcanis/ahriman
1
0
Fork 0
mirror of https://github.com/arcan1s/ahriman.git synced 2025-04-29 01:37:17 +00:00
Code Issues Projects Releases Wiki Activity

hide getting logs under reporter permission

Browse Source
This commit is contained in:
Evgenii Alekseev 2022-11-21 18:07:03 +02:00
parent 88535c2827
commit f5e24ec6ff
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/ahriman/web/views/status/logs.py
View File

@ -38,7 +38,7 @@ class LogsView(BaseView):
""" """
DELETE_PERMISSION = POST_PERMISSION = UserAccess.Full DELETE_PERMISSION = POST_PERMISSION = UserAccess.Full
GET_PERMISSION = HEAD_PERMISSION = UserAccess.Read GET_PERMISSION = HEAD_PERMISSION = UserAccess.Reporter
async def delete(self) -> None: async def delete(self) -> None:
""" """

2
tests/ahriman/web/views/status/test_views_status_logs.py
View File

@ -14,7 +14,7 @@ async def test_get_permission() -> None:
""" """
for method in ("GET", "HEAD"): for method in ("GET", "HEAD"):
request = pytest.helpers.request("", "", method) request = pytest.helpers.request("", "", method)
assert await LogsView.get_permission(request) == UserAccess.Read assert await LogsView.get_permission(request) == UserAccess.Reporter
for method in ("DELETE", "POST"): for method in ("DELETE", "POST"):
request = pytest.helpers.request("", "", method) request = pytest.helpers.request("", "", method)
assert await LogsView.get_permission(request) == UserAccess.Full assert await LogsView.get_permission(request) == UserAccess.Full