CGM_Public/pretix_original
2
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-01-24 00:32:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix incorrect device security profiles

Browse Source
This commit is contained in:
Raphael Michel
2020-10-23 18:52:39 +02:00
parent 0482920a01
commit 7b46292da3
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/pretix/api/auth/devicesecurity.py
View File

@@ -22,8 +22,8 @@ class PretixScanSecurityProfile(AllowListSecurityProfile):
verbose_name = _('pretixSCAN')
allowlist = (
('GET', 'api-v1:version'),
('GET', 'api-v1:device.update'),
('GET', 'api-v1:device.revoke'),
('POST', 'api-v1:device.update'),
('POST', 'api-v1:device.revoke'),
('GET', 'api-v1:event-list'),
('GET', 'api-v1:event-detail'),
('GET', 'api-v1:subevent-list'),
@@ -48,8 +48,8 @@ class PretixScanNoSyncSecurityProfile(AllowListSecurityProfile):
verbose_name = _('pretixSCAN (kiosk mode, online only)')
allowlist = (
('GET', 'api-v1:version'),
('GET', 'api-v1:device.update'),
('GET', 'api-v1:device.revoke'),
('POST', 'api-v1:device.update'),
('POST', 'api-v1:device.revoke'),
('GET', 'api-v1:event-list'),
('GET', 'api-v1:event-detail'),
('GET', 'api-v1:subevent-list'),
@@ -72,8 +72,8 @@ class PretixPosSecurityProfile(AllowListSecurityProfile):
verbose_name = _('pretixPOS')
allowlist = (
('GET', 'api-v1:version'),
('GET', 'api-v1:device.update'),
('GET', 'api-v1:device.revoke'),
('POST', 'api-v1:device.update'),
('POST', 'api-v1:device.revoke'),
('GET', 'api-v1:event-list'),
('GET', 'api-v1:event-detail'),
('GET', 'api-v1:subevent-list'),