From 833908604c66abd9c288172a377bef9114f062f0 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Jul 04 2016 08:28:33 +0000 Subject: Turn off the groups related endpoint if the configuration prevents it --- diff --git a/pagure/ui/groups.py b/pagure/ui/groups.py index 7d0ebb3..1d15e90 100644 --- a/pagure/ui/groups.py +++ b/pagure/ui/groups.py @@ -69,7 +69,8 @@ def view_group(group): # Add new user to the group if asked form = pagure.forms.AddUserForm() - if pagure.authenticated() and form.validate_on_submit(): + if pagure.authenticated() and form.validate_on_submit() \ + and APP.config.get('ENABLE_GROUP_MNGT', False): username = form.user.data @@ -121,6 +122,9 @@ def group_user_delete(user, group): if not pagure.APP.config.get('ENABLE_USER_MNGT', True): flask.abort(404) + if APP.config.get('ENABLE_GROUP_MNGT', False): + flask.abort(404) + form = pagure.forms.ConfirmationForm() if form.validate_on_submit(): @@ -163,6 +167,9 @@ def group_delete(group): if not pagure.APP.config.get('ENABLE_USER_MNGT', True): flask.abort(404) + if APP.config.get('ENABLE_GROUP_MNGT', False): + flask.abort(404) + form = pagure.forms.ConfirmationForm() if form.validate_on_submit(): group_obj = pagure.lib.search_groups( @@ -201,6 +208,9 @@ def add_group(): if not pagure.APP.config.get('ENABLE_USER_MNGT', True): flask.abort(404) + if APP.config.get('ENABLE_GROUP_MNGT', False): + flask.abort(404) + user = pagure.lib.search_user( pagure.SESSION, username=flask.g.fas_user.username) if not user: # pragma: no cover