github/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2025-12-10 16:51:24 +01:00
Code Issues Projects Releases Packages Wiki Activity

Added permission check to every view, closes #808

Browse source
This commit is contained in:
Simon Willison 2020-06-06 22:30:36 -07:00
commit 86dec9e8ff
13 changed files with 220 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
datasette/app.py
View file

@ -49,6 +49,7 @@ from .utils import (
)
from .utils.asgi import (
AsgiLifespan,
Forbidden,
NotFound,
Request,
Response,
@ -1003,6 +1004,10 @@ class DatasetteRouter(AsgiRouter):
status = 404
info = {}
message = exception.args[0]
elif isinstance(exception, Forbidden):
status = 403
info = {}
message = exception.args[0]
elif isinstance(exception, DatasetteError):
status = exception.status
info = exception.error_dict