search

jamesdabbs / pi-base.hs

A Haskell-powered modernization of Counterexamples in Topology
MIT License
39 stars 5 forks source link

add explicit authorization for POST on edit pages #47

Closed konradvoelkel closed 9 years ago

konradvoelkel commented 9 years ago

Logged in users could see edit pages, but submitting would fail because POST goes to a different request. These are now explicitly authorized to be called by logged in users. Even if one later changes the authorizations for editing, it is better to state these ecplicitly.

Fixes #37

jamesdabbs commented 9 years ago

Slight problem with this patch, in that it would require users to log in before GET'ing the show pages for those various resources. The spirit of the fix, however, is added in f6b95e8.