From 56b0d8623a3e552e9a9b252d280ba91381534394 Mon Sep 17 00:00:00 2001 From: Christian Stefanescu Date: Thu, 7 Aug 2025 14:58:22 +0200 Subject: [PATCH 1/2] bugfix: Disallow collection creation in maintenance mode --- aleph/views/collections_api.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/aleph/views/collections_api.py b/aleph/views/collections_api.py index 814cae29dc..89cfe77ec8 100644 --- a/aleph/views/collections_api.py +++ b/aleph/views/collections_api.py @@ -66,7 +66,7 @@ def create(): schema: $ref: '#/components/schemas/Collection' """ - require(request.authz.logged_in) + require(request.authz.session_write) data = parse_request("CollectionCreate") sync = get_flag("sync", True) try: From 658923400b64b28a0dca8c9e241e2f9ee0072e0d Mon Sep 17 00:00:00 2001 From: Christian Stefanescu Date: Thu, 7 Aug 2025 14:58:39 +0200 Subject: [PATCH 2/2] bugfix: Disallow export creation in maintenance mode --- aleph/views/entities_api.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/aleph/views/entities_api.py b/aleph/views/entities_api.py index c4b8d6ccdd..c94641b677 100644 --- a/aleph/views/entities_api.py +++ b/aleph/views/entities_api.py @@ -163,7 +163,7 @@ def export(): tags: - Entity """ - require(request.authz.logged_in) + require(request.authz.session_write) parser = SearchQueryParser(request.args, request.authz) tag_request(query=parser.text, prefix=parser.prefix) query = EntitiesQuery(parser)