vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Ensure that verbs cannot be performed on disabled namespaces or by disabled users

Browse source
This commit is contained in:
Joseph Schorr 2018-06-19 17:32:17 -04:00
parent db7e5f7cfa
commit 892cc82b6a
4 changed files with 47 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
endpoints/verbs/__init__.py
View file

@ -204,6 +204,10 @@ def _verify_repo_verb(_, namespace, repo_name, tag, verb, checker=None):
get_authenticated_user())
abort(405)
# Make sure the repo's namespace isn't disabled.
if not model.is_namespace_enabled(namespace):
abort(400)
# If there is a data checker, call it first.
if checker is not None:
if not checker(tag_image):