mgoetz/ldap_account_manager
Archived
2
2
Fork 0
Code Issues 9 Pull Requests Releases 2 Wiki Activity

Implement better group cross realm protection msg. Close #46

Browse Source
This commit is contained in:
Götz 2019-05-02 14:00:37 +02:00
parent bcd0109577
commit fe70dbc002
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/account_manager/views/group_views.py
View File

@ -16,7 +16,11 @@ def protect_cross_realm_group_access(view_func):
group_dn = kwargs.get('group_dn', None) group_dn = kwargs.get('group_dn', None)
if realm_id and group_dn and Realm.objects.get(id=realm_id).ldap_base_dn not in group_dn: if realm_id and group_dn and Realm.objects.get(id=realm_id).ldap_base_dn not in group_dn:
return HttpResponse("Ressource konnte nicht gefunden werden.", status=404) return render(request, 'permission_denied.jinja2',
{
'extra_errors':
'Die angefragte Gruppe gehört einem anderen Bereich an. Gruppen können nur von dem Bereich bearbeitet werden, in dem sie erstellt wurden.'},
status=404)
return view_func(request, *args, **kwargs) return view_func(request, *args, **kwargs)
return decorator return decorator