]> git.ipfire.org Git - thirdparty/patchwork.git/commit
projects / thirdparty / patchwork.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1139b9a) | patch
Prevent any user from updating public bundles
authorAbdun Nihaal <abdun.nihaal@gmail.com>
Wed, 16 Apr 2025 16:32:36 +0000 (22:02 +0530)
committerStephen Finucane <stephenfinucane@hotmail.com>
Sun, 7 Jun 2026 16:40:52 +0000 (17:40 +0100)
commitfc278e2c551be25dc3c5d0e9ed646f0a149d131a
treec43e9c39f214b9784657c2cdbf3445a40475a7d7tree | snapshot
parent1139b9ae0e09e589073c506d4209dea865621eb1commit | diff
Prevent any user from updating public bundles

Currently, the web UI allows any logged in user to remove patches from
public bundles. However the correct behaviour is that only the owner of
the bundle should be allowed to update a bundle.

Fix that by adding checks in set_bundle() before adding or removing
patches from bundles.

Signed-off-by: Abdun Nihaal <abdun.nihaal@gmail.com>
Closes: #599
patchwork/views/__init__.py diff | blob | blame | history
Mirror of https://github.com/getpatchwork/patchwork.git