rattail/tailbone
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Only allow POST method for executing "results" for batch grid

Browse source
This commit is contained in:
Lance Edgar 2019-01-02 17:07:43 -06:00
parent c064bb275f
commit 1e42fe9de5
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
tailbone/views/batch/core.py
View file

@ -1399,7 +1399,8 @@ class BatchMasterView(MasterView):
# execute (multiple) batch results
if cls.results_executable:
config.add_route('{}.execute_results'.format(route_prefix), '{}/execute-results'.format(url_prefix))
config.add_route('{}.execute_results'.format(route_prefix), '{}/execute-results'.format(url_prefix),
request_method='POST')
config.add_view(cls, attr='execute_results', route_name='{}.execute_results'.format(route_prefix),
permission='{}.execute_multiple'.format(permission_prefix))
config.add_tailbone_permission(permission_prefix, '{}.execute_multiple'.format(permission_prefix),