浏览代码

[beeswax] Check for ownership before saving

Romain Rigaux 11 年之前
父节点
当前提交
a2e65e25f4
共有 1 个文件被更改,包括 1 次插入0 次删除
  1. 1 0
      apps/beeswax/src/beeswax/views.py

+ 1 - 0
apps/beeswax/src/beeswax/views.py

@@ -76,6 +76,7 @@ def save_design(request, form, type_, design, explicit_save):
   Need to return a SavedQuery because we may end up with a different one.
   Assumes that form.saveform is the SaveForm, and that it is valid.
   """
+  authorized_get_design(request, design.id, owner_only=True)
   assert form.saveform.is_valid()
   sub_design_form = form # Beeswax/Impala case