Enforce issue verification permissions in the API.

Review Request #9276 — Created Oct. 17, 2017 and submitted

Information

Review Board
release-3.0.x
220762f...

Reviewers

The existing issue verification code did enforcement entirely within the
frontend. This meant that users could craft an API request to directly close
issues which should be verified first.

This change adds some gatekeeping in the API resource to ensure that users have
permission to do so when changing the issue status to closed.

  • Ran unit tests.
  • Checked that the issue verification UI still functioned correctly.
Description From Last Updated

This can fit on one line.

chipx86chipx86
chipx86
  1. 
      
  2. reviewboard/webapi/tests/mixins_comment.py (Diff revision 1)
     
     
     

    This can fit on one line.

  3. 
      
david
Review request changed

Status: Closed (submitted)

Change Summary:

Pushed to release-3.0.x (a84350d)
Loading...