vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Adding in security tests and docs.

Browse source
This commit is contained in:
charltonaustin 2016-10-10 16:33:58 -04:00
parent 7fc33a9a57
commit 5a4b702888
4 changed files with 44 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

12
endpoints/api/superuser.py
View file

@ -873,19 +873,21 @@ class SuperUserMessages(ApiResource):
@nickname('getMessages')
def get(self):
""" Return a super users messages """
messages = list(model.message.get_messages())
return {
'messages': [message_view(m) for m in messages],
'messages': [message_view(m) for m in model.message.get_messages()],
}
@require_scope(scopes.SUPERUSER)
@verify_not_prod
@nickname('createMessages')
@validate_json_request('CreateMessage')
@require_scope(scopes.SUPERUSER)
def post(self):
""" Create a message """
body = request.get_json()
model.message.create([body['message']])
if SuperUserPermission().can():
model.message.create([request.get_json()['message']])
return make_response('', 201)
abort(403)
def message_view(message):
return {'id': message.id, 'content': message.content}