From 2601d2bcdccd84a3f6242b266ad60e9a32d50b11 Mon Sep 17 00:00:00 2001
From: Jorran de Wit <jorrandewit@outlook.com>
Date: Fri, 20 Oct 2017 21:51:45 +0200
Subject: [PATCH] Fix minor security issue
---
finances/views.py | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/finances/views.py b/finances/views.py
index 33200e7c2..649259a24 100644
--- a/finances/views.py
+++ b/finances/views.py
@@ -1,5 +1,6 @@
from django.contrib import messages
from django.contrib.auth.decorators import permission_required
+from django.contrib.auth.mixins import LoginRequiredMixin
from django.http import Http404
from django.shortcuts import render
from django.views.generic.edit import DeleteView
@@ -25,7 +26,7 @@ def timesheets(request):
return render(request, 'finances/timesheets.html', context)
-class LogDeleteView(DeleteView):
+class LogDeleteView(LoginRequiredMixin, DeleteView):
model = WorkLog
def get_object(self):
--
GitLab