0001-api-restrict-API-to-authenticated-admin-users-fixes-.patch

Benjamin Dauvergne, 28 mars 2019 17:20

Voir les différences: en ligne côte à côte

Subject: [PATCH] api: restrict API to authenticated admin users (fixes #31828)

 tests/conftest.py             | 6 ++++--
 zoo/settings.py               | 7 +++++--
 zoo/zoo_nanterre/api_views.py | 2 ++
 3 files changed, 11 insertions(+), 4 deletions(-)

     @pytest.fixture
     def app(request):
     def app(request, admin):
         wtm = django_webtest.WebTestMixin()
         wtm._patch_settings()
         request.addfinalizer(wtm._unpatch_settings)
         return django_webtest.DjangoTestApp(extra_environ={'HTTP_HOST': 'localhost'})
         app = django_webtest.DjangoTestApp(extra_environ={'HTTP_HOST': 'localhost'})
         app.authorization = ('Basic', ('admin', 'admin'))
         return app
     @pytest.fixture

     # Rest Framework
     REST_FRAMEWORK = {
         # 'EXCEPTION_HANDLER': 'zoo.utils.rest_exception_handler',
         'DEFAULT_AUTHENTICATION_CLASSES': (),
         'DEFAULT_PERMISSION_CLASSES': (),
         'DEFAULT_AUTHENTICATION_CLASSES': (
             'rest_framework.authentication.BasicAuthentication',
             'rest_framework.authentication.SessionAuthentication',
         ),
         'DEFAULT_PERMISSION_CLASSES': ('rest_framework.permissions.IsAdminUser',),
+    }
     ZOO_NANTERRE_APPLICATIONS = {

     class Federation(IndividuViewMixin, APIView):
         permission_classes = ()
         def get(self, request, identifier, application, format=None):
             app_dfn = utils.get_application(application)
             if not app_dfn:
+    -

Projet

Général

Profil

Produits Entr'ouvert » Zoo

0001-api-restrict-API-to-authenticated-admin-users-fixes-.patch