From 8484c0f0aa8bcb02a234c816a75a423737b0297c Mon Sep 17 00:00:00 2001 From: rubenwardy Date: Tue, 19 May 2020 16:46:47 +0100 Subject: [PATCH] Fix minor security vulnerability --- app/models.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/app/models.py b/app/models.py index 3d65b32..61b6e56 100644 --- a/app/models.py +++ b/app/models.py @@ -847,12 +847,11 @@ class PackageRelease(db.Model): name=self.package.name, id=self.id) - def __init__(self): self.releaseDate = datetime.datetime.now() def approve(self, user): - if self.package.approved and \ + if self.package.approved or \ not self.package.checkPerm(user, Permission.APPROVE_RELEASE): return False