Prevent users from changing the name of approved packages

1 files changed, 6 insertions, 0 deletions

diff --git a/app/views/packages/packages.py b/app/views/packages/packages.py
index 51de415..e74ca7e 100644
--- a/app/views/packages/packages.py
+++ b/app/views/packages/packages.py
@@ -243,6 +243,12 @@ def create_edit_package_page(author=None, name=None):
 			package = Package()
 			package.author = author
 			wasNew = True
+
+		elif package.approved and package.name != form.name.data and \
+				not package.checkPerm(current_user, Permission.CHANGE_NAME):
+			flash("Unable to change package name", "danger")
+			return redirect(url_for("create_edit_package_page", author=author, name=name))
+
 		else:
 			triggerNotif(package.author, current_user,
 					"{} edited".format(package.title), package.getDetailsURL())