From e87db8b87fbfb826882ccf12bd28ed9d0e9918de Mon Sep 17 00:00:00 2001 From: rubenwardy Date: Mon, 29 Jul 2019 20:29:55 +0100 Subject: Prevent users from changing the name of approved packages --- app/views/packages/packages.py | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'app/views') diff --git a/app/views/packages/packages.py b/app/views/packages/packages.py index 51de415..e74ca7e 100644 --- a/app/views/packages/packages.py +++ b/app/views/packages/packages.py @@ -243,6 +243,12 @@ def create_edit_package_page(author=None, name=None): package = Package() package.author = author wasNew = True + + elif package.approved and package.name != form.name.data and \ + not package.checkPerm(current_user, Permission.CHANGE_NAME): + flash("Unable to change package name", "danger") + return redirect(url_for("create_edit_package_page", author=author, name=name)) + else: triggerNotif(package.author, current_user, "{} edited".format(package.title), package.getDetailsURL()) -- cgit v1.2.3