[#7] Restrict access to source admin page

2013-02-25 13:10:30 +00:00 · 2013-02-25 13:10:30 +00:00 · 93e15dc529
parent 457b8d5988
commit 93e15dc529
1 changed files with 1 additions and 0 deletions
--- a/ckanext/harvest/controllers/view.py
+++ b/ckanext/harvest/controllers/view.py
@ -337,6 +337,7 @@ class ViewController(BaseController):
    def admin(self, id):
        try:
            context = {'model':model, 'user':c.user}
+            p.toolkit.check_access('harvest_source_update', context, {'id': id})
            c.harvest_source = get_action('harvest_source_show')(context, {'id':id})
            return render('source/admin.html')
        except NotFound: