Require admin for new import_tools function in workflows API.

Includes test case.
This commit is contained in:
John Chilton
2017-08-10 13:29:44 -04:00
parent 23db89ba3d
commit 7dd3ddccaf
2 changed files with 10 additions and 1 deletions
@@ -503,6 +503,9 @@ class WorkflowsAPIController(BaseAPIController, UsesStoredWorkflowMixin, UsesAnn
data = payload['workflow']
import_tools = util.string_as_bool( payload.get( "import_tools", False ) )
if import_tools and not trans.user_is_admin():
raise exceptions.AdminRequiredException()
publish = util.string_as_bool( payload.get( "publish", False ) )
# If 'publish' set, default to importable.
importable = util.string_as_bool( payload.get( "importable", publish ) )