From 526e28748e72e1d0364f2e23c67cb72a64767004 Mon Sep 17 00:00:00 2001
From: Dominik George <dominik.george@teckids.org>
Date: Wed, 22 Apr 2020 23:19:00 +0200
Subject: [PATCH] Reintroduce permission check on searchbar snippets
---
aleksis/core/views.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/aleksis/core/views.py b/aleksis/core/views.py
index 151852d84..6c4fad570 100644
--- a/aleksis/core/views.py
+++ b/aleksis/core/views.py
@@ -358,6 +358,7 @@ def delete_announcement(request: HttpRequest, pk: int) -> HttpResponse:
return redirect("announcements")
+@permission_required("core.search")
def searchbar_snippets(request: HttpRequest) -> HttpResponse:
query = request.GET.get('q', '')
limit = int(request.GET.get('limit', '5'))
--
GitLab