Prevent API from changing protected tags

Fixes #322
2021-07-24 00:43:55 +01:00
parent 3049d17f5e
commit 823c06d3ea
4 changed files with 18 additions and 9 deletions
--- a/app/blueprints/api/support.py
+++ b/app/blueprints/api/support.py
@@ -100,7 +100,7 @@ def api_edit_package(token: APIToken, package: Package, data: dict, reason: str

 	reason += ", token=" + token.name

-	package = guard(do_edit_package)(token.owner, package, False, data, reason)
+	package = guard(do_edit_package)(token.owner, package, False, False, data, reason)

 	return jsonify({
 		"success": True,