From e94ac60ec21a15fc19c19a587c51ed8999150384 Mon Sep 17 00:00:00 2001 From: Johannes Löthberg Date: Thu, 28 Dec 2017 19:16:12 +0100 Subject: Require mirror.change_mirror perm to see emails MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Johannes Löthberg --- mirrors/views/api.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'mirrors/views') diff --git a/mirrors/views/api.py b/mirrors/views/api.py index db80080f..a04c93f3 100644 --- a/mirrors/views/api.py +++ b/mirrors/views/api.py @@ -92,7 +92,7 @@ def mirror_details_json(request, name): show_all=authorized) data = status_info.copy() data['version'] = 3 - if authorized: + if authorized and request.user.has_perm('mirror.change_mirror'): data['admin_email'] = mirror.admin_email data['alternate_email'] = mirror.alternate_email to_json = json.dumps(data, ensure_ascii=False, -- cgit v1.2.3-55-g3dc8