ckan / ckanext-pages

A simple builtin CMS for CKAN sites
GNU General Public License v3.0
51 stars 99 forks source link

Fix group/org pages update permissions #84

Closed smotornyuk closed 5 years ago

smotornyuk commented 5 years ago

Currently, page edit form for both organization and group pages calls pages_update function, that requires sysadmin account. As a result, organization admins(not sysadmins) will be logged out after an attempt to update the organization's page.

This PR updates permission checks as well as fixes few small problems(for example, group/org edit auth checks were returning boolean instead of dict in form {'success': boolean})