[#2939] add auth check for package_owner_org_update

ckan · Nov 13, 2012 · 2754b34 · 2754b34
1 parent 4a788ea
commit 2754b34
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/ckan/logic/action/update.py b/ckan/logic/action/update.py
@@ -987,7 +987,7 @@ def package_owner_org_update(context, data_dict):
     name_or_id = data_dict.get('id')
     organization_id = data_dict.get('organization_id')
 
-    # FIXME auth
+    _check_access('package_owner_org_update', context, data_dict)
 
     pkg = model.Package.get(name_or_id)
     if pkg is None:

diff --git a/ckan/logic/auth/update.py b/ckan/logic/auth/update.py
@@ -172,3 +172,6 @@ def group_update_rest(context, data_dict):
 
     return group_update(context, data_dict)
 
+def package_owner_org_update(context, data_dict):
+    # sysadmins only
+    return {'success': False}