ProjectCreateView allows POST on TARGET site if PROJECTROLES_TARGET_CREATE==False

bihealth / sodar-core

SODAR Core: A Django-based framework for building scientific data management web apps

MIT License

9 stars 1 forks source link

Closed mikkonie closed 2 months ago

mikkonie commented 2 months ago

Something I found when I was adding missing tests in #1389. This should not happen of course. GET requests are properly denied but POST is possible.

I'll also need to test and verify expected behaviour in the REST API views as well.

mikkonie commented 2 months ago

Fixed as part of #1389, to be merged.