mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
385a332197
change_options set is_template for any owner with is_change; the "staff only" rule existed only as a disabled checkbox in the UI. A non-staff owner could mark or unmark templates with a POST, and because a disabled checkbox is not submitted, a non-staff owner who only edited a template's title or description silently unmarked it, which lifted the template-only restrictions. Only change is_template for superusers and staff (for them an unchecked, unsubmitted checkbox still means "not a template"); leave it alone for everyone else. |
||
|---|---|---|
| .. | ||
| api | ||
| fixtures | ||
| migrations | ||
| templates | ||
| templatetags | ||
| __init__.py | ||
| apps.py | ||
| forms.py | ||
| models.py | ||
| test_create_instance.py | ||
| test_index.py | ||
| test_root_pass.py | ||
| test_security_mutations.py | ||
| test_template_flag.py | ||
| tests.py | ||
| urls.py | ||
| utils.py | ||
| views.py | ||