Added authentication check for edit_POST (security issue)

2010-01-18 23:16:11 +02:00 · 2010-01-18 23:16:11 +02:00 · 9898e04795
commit 9898e04795
parent 8383d72436
1 changed files with 2 additions and 1 deletions
--- a/scribeengine/controllers/post.py
+++ b/scribeengine/controllers/post.py
@ -47,7 +47,8 @@ class PostController(BaseController):
        c.post = Session.query(Post).get(id)
        c.page_title = 'Edit Post: %s' % c.post.title
        return render(u'/post/edit.mako')
-
+        
+    @authenticate(u'Edit My Posts')
    def edit_POST(self, id=None):
        url = utils.generate_url(c.form_values[u'title'])
        if id is None: