diff options
| author | Jessica Tallon <jessica@megworld.co.uk> | 2014-07-10 18:17:47 +0100 |
|---|---|---|
| committer | Jessica Tallon <jessica@megworld.co.uk> | 2014-07-22 23:13:16 +0100 |
| commit | 967df5eff0c00fe7cd860ebfb297ee1f2e0bcdaf (patch) | |
| tree | 5b6bfb599e283b7b8dbc6f79e1e8472edca6f95b /mediagoblin/federation/views.py | |
| parent | ee9956c3de39854f32207789b223f09eb7bbb20b (diff) | |
| download | mediagoblin-967df5eff0c00fe7cd860ebfb297ee1f2e0bcdaf.tar.lz mediagoblin-967df5eff0c00fe7cd860ebfb297ee1f2e0bcdaf.tar.xz mediagoblin-967df5eff0c00fe7cd860ebfb297ee1f2e0bcdaf.zip | |
Require uploader privileges to upload media to API
Diffstat (limited to 'mediagoblin/federation/views.py')
| -rw-r--r-- | mediagoblin/federation/views.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/mediagoblin/federation/views.py b/mediagoblin/federation/views.py index 8af5565b..6e4d81d4 100644 --- a/mediagoblin/federation/views.py +++ b/mediagoblin/federation/views.py @@ -1,4 +1,3 @@ - import json import io import mimetypes @@ -7,6 +6,7 @@ from werkzeug.datastructures import FileStorage from mediagoblin.media_types import sniff_media from mediagoblin.decorators import oauth_required +from mediagoblin.federation.decorators import user_has_privilege from mediagoblin.db.models import User, MediaEntry, MediaComment from mediagoblin.tools.response import redirect, json_response from mediagoblin.meddleware.csrf import csrf_exempt @@ -46,6 +46,7 @@ def user(request): @oauth_required @csrf_exempt +@user_has_privilege(u'uploader') def uploads(request): """ Endpoint for file uploads """ user = request.matchdict["username"] |