Closed dpinney closed 10 years ago
Nevermind that deleted comment, I figured it out.
Actually, I'd prefer to do:
if User.cu() == "admin" and pData["user"] == "public":
pData["user"] = "public"
else:
pData["user"] = User.cu()
That way we are sure only admin can ever re-run public feeders.
We do not provide the rerun web interface for other users. Okay, I will change it into the secure one.
Thanks. We shouldn't rely on the fronted for security.
988240673ce7d8e9243cb9e65891d9d38ba0d221 fixed it.