Prevent users from changing the name of approved packages

This commit is contained in:
rubenwardy
2019-07-29 20:29:55 +01:00
parent b36273a848
commit e87db8b87f
3 changed files with 12 additions and 1 deletions

View File

@@ -243,6 +243,12 @@ def create_edit_package_page(author=None, name=None):
package = Package()
package.author = author
wasNew = True
elif package.approved and package.name != form.name.data and \
not package.checkPerm(current_user, Permission.CHANGE_NAME):
flash("Unable to change package name", "danger")
return redirect(url_for("create_edit_package_page", author=author, name=name))
else:
triggerNotif(package.author, current_user,
"{} edited".format(package.title), package.getDetailsURL())