External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-05-08 01:47:35 -02:30
Code Issues Packages Projects Releases Wiki Activity

Protect against bad posts, fixes some test cases

Browse Source
This commit is contained in:
Akita Noek
2016-05-18 17:01:38 -04:00
parent 49a2f6b535
commit 9fba513c4f
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
awx/api/views.py
View File

@@ -729,7 +729,7 @@ class OrganizationUsersList(SubListCreateAttachDetachAPIView):
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
ret = super(OrganizationUsersList, self).post( request, *args, **kwargs) ret = super(OrganizationUsersList, self).post( request, *args, **kwargs)
if request.data.get('is_system_auditor', False): if type(request.data) is dict and request.data.get('is_system_auditor', False):
# This is a faux-field that just maps to checking the system # This is a faux-field that just maps to checking the system
# auditor role member list.. unfortunately this means we can't # auditor role member list.. unfortunately this means we can't
# set it on creation, and thus needs to be set here. # set it on creation, and thus needs to be set here.
@@ -1109,7 +1109,7 @@ class UserList(ListCreateAPIView):
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
ret = super(UserList, self).post( request, *args, **kwargs) ret = super(UserList, self).post( request, *args, **kwargs)
if request.data.get('is_system_auditor', False): if type(request.data) is dict and request.data.get('is_system_auditor', False):
# This is a faux-field that just maps to checking the system # This is a faux-field that just maps to checking the system
# auditor role member list.. unfortunately this means we can't # auditor role member list.. unfortunately this means we can't
# set it on creation, and thus needs to be set here. # set it on creation, and thus needs to be set here.