oci/zeronet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Allow dbQuery and userGetSettings for Cors permissioned sites

Browse source
This commit is contained in:
shortcutme 2018-01-28 16:44:23 +01:00
parent 335a7a76b1
commit 327badb3ca
No known key found for this signature in database
GPG key ID: 5B63BAE6CB9613AE
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
plugins/Cors/CorsPlugin.py
View file

@ -23,6 +23,15 @@ def getCorsPath(site, inner_path):
@PluginManager.registerTo("UiWebsocket") @PluginManager.registerTo("UiWebsocket")
class UiWebsocketPlugin(object): class UiWebsocketPlugin(object):
def hasSitePermission(self, address, cmd=None):
if super(UiWebsocketPlugin, self).hasSitePermission(address, cmd=cmd):
return True
if not "Cors:%s" % address in self.site.settings["permissions"] or cmd not in ["dbQuery", "userGetSettings"]:
return False
else:
return True
# Add cors support for file commands # Add cors support for file commands
def corsFuncWrapper(self, func_name, to, inner_path, *args, **kwargs): def corsFuncWrapper(self, func_name, to, inner_path, *args, **kwargs):
if inner_path.startswith("cors-"): if inner_path.startswith("cors-"):