From 7bf46d9b5363d9a2742aec810ca437426b413fac Mon Sep 17 00:00:00 2001 From: Nicolas Le Manchet Date: Wed, 23 Jul 2014 10:20:01 +0200 Subject: [PATCH] Add auth decorator to delete, edit, like/dislike --- isso/views/api.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/isso/views/api.py b/isso/views/api.py index 67de650..715588b 100644 --- a/isso/views/api.py +++ b/isso/views/api.py @@ -169,6 +169,7 @@ class API(object): return JSON(self.serialize(comment, markup), 200) @xhr + @auth def edit(self, environ, request, id): try: @@ -211,6 +212,7 @@ class API(object): return resp @xhr + @auth def delete(self, environ, request, id, key=None): try: @@ -364,6 +366,7 @@ class API(object): return map(self.serialize, fetched_list) @xhr + @auth def like(self, environ, request, id): remote_addr = utils.anonymize(str(request.remote_addr)) @@ -373,6 +376,7 @@ class API(object): return Response("Ok", 200) @xhr + @auth def dislike(self, environ, request, id): remote_addr = utils.anonymize(str(request.remote_addr))