forked from 0x2620/pandora
ignore unknown tasks
This commit is contained in:
parent
7c320c7614
commit
099c2610e6
1 changed files with 4 additions and 1 deletions
|
@ -44,7 +44,10 @@ def cancelTask(request, data):
|
|||
if not isinstance(ids, list):
|
||||
ids = [ids]
|
||||
for id in ids:
|
||||
try:
|
||||
task = models.Task.get(id)
|
||||
except models.Task.DoesNotExist:
|
||||
continue
|
||||
if task.user != request.user and not request.user.profile.capability('canSeeAllTasks'):
|
||||
response = json_response(status=403, text='permission denied')
|
||||
return render_to_json_response(response)
|
||||
|
|
Loading…
Reference in a new issue