Merge "Authenticate before Authorization"

This commit is contained in:
Zuul 2020-04-01 06:52:19 +00:00 committed by Gerrit Code Review
commit 36a803ce8b
1 changed files with 3 additions and 3 deletions

View File

@ -561,13 +561,13 @@ class Dashboard(Registry, HorizonComponent):
urlpatterns.append(
url(r'', _wrapped_include(default_panel._decorated_urls)))
# Require login if not public.
if not self.public:
_decorate_urlconf(urlpatterns, require_auth)
# Apply access controls to all views in the patterns
permissions = getattr(self, 'permissions', [])
_decorate_urlconf(urlpatterns, require_perms, permissions)
_decorate_urlconf(urlpatterns, _current_component, dashboard=self)
# Require login if not public.
if not self.public:
_decorate_urlconf(urlpatterns, require_auth)
# Return the three arguments to django.conf.urls.include
return urlpatterns, self.slug, self.slug