diff options
author | rubenwardy <rw@rubenwardy.com> | 2020-05-19 16:46:47 +0100 |
---|---|---|
committer | rubenwardy <rw@rubenwardy.com> | 2020-05-19 16:46:47 +0100 |
commit | 8484c0f0aa8bcb02a234c816a75a423737b0297c (patch) | |
tree | 9a014c2d724072ee563895d05e230ac6c48ebfb7 /app/models.py | |
parent | ffb5b49521bc6e9b54fe33aa70acdd3087ecc266 (diff) | |
download | cheatdb-8484c0f0aa8bcb02a234c816a75a423737b0297c.tar.xz |
Fix minor security vulnerability
Diffstat (limited to 'app/models.py')
-rw-r--r-- | app/models.py | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/app/models.py b/app/models.py index 3d65b32..61b6e56 100644 --- a/app/models.py +++ b/app/models.py @@ -847,12 +847,11 @@ class PackageRelease(db.Model): name=self.package.name, id=self.id) - def __init__(self): self.releaseDate = datetime.datetime.now() def approve(self, user): - if self.package.approved and \ + if self.package.approved or \ not self.package.checkPerm(user, Permission.APPROVE_RELEASE): return False |