CGM_Public/pretix_original
3
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-14 11:26:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix incorrect device security profiles

Browse Source
This commit is contained in:
Raphael Michel
2020-10-23 18:52:39 +02:00
parent 0482920a01
commit 7b46292da3
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pretix/api/auth/devicesecurity.py
+6 -6
View File
@@ -22,8 +22,8 @@ class PretixScanSecurityProfile(AllowListSecurityProfile):
verbose_name = _('pretixSCAN') verbose_name = _('pretixSCAN')
allowlist = ( allowlist = (
('GET', 'api-v1:version'), ('GET', 'api-v1:version'),
('GET', 'api-v1:device.update'), ('POST', 'api-v1:device.update'),
('GET', 'api-v1:device.revoke'), ('POST', 'api-v1:device.revoke'),
('GET', 'api-v1:event-list'), ('GET', 'api-v1:event-list'),
('GET', 'api-v1:event-detail'), ('GET', 'api-v1:event-detail'),
('GET', 'api-v1:subevent-list'), ('GET', 'api-v1:subevent-list'),
@@ -48,8 +48,8 @@ class PretixScanNoSyncSecurityProfile(AllowListSecurityProfile):
verbose_name = _('pretixSCAN (kiosk mode, online only)') verbose_name = _('pretixSCAN (kiosk mode, online only)')
allowlist = ( allowlist = (
('GET', 'api-v1:version'), ('GET', 'api-v1:version'),
('GET', 'api-v1:device.update'), ('POST', 'api-v1:device.update'),
('GET', 'api-v1:device.revoke'), ('POST', 'api-v1:device.revoke'),
('GET', 'api-v1:event-list'), ('GET', 'api-v1:event-list'),
('GET', 'api-v1:event-detail'), ('GET', 'api-v1:event-detail'),
('GET', 'api-v1:subevent-list'), ('GET', 'api-v1:subevent-list'),
@@ -72,8 +72,8 @@ class PretixPosSecurityProfile(AllowListSecurityProfile):
verbose_name = _('pretixPOS') verbose_name = _('pretixPOS')
allowlist = ( allowlist = (
('GET', 'api-v1:version'), ('GET', 'api-v1:version'),
('GET', 'api-v1:device.update'), ('POST', 'api-v1:device.update'),
('GET', 'api-v1:device.revoke'), ('POST', 'api-v1:device.revoke'),
('GET', 'api-v1:event-list'), ('GET', 'api-v1:event-list'),
('GET', 'api-v1:event-detail'), ('GET', 'api-v1:event-detail'),
('GET', 'api-v1:subevent-list'), ('GET', 'api-v1:subevent-list'),