From 13b359d8e4682fb239cf02293aef3a1b235a2cf6 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Mon, 2 Mar 2015 14:47:22 -0500 Subject: Require admin when accessing REST pages Signed-off-by: Rob Crittenden Reviewed-by: Patrick Uiterwijk --- ipsilon/providers/saml2/rest.py | 3 +++ 1 file changed, 3 insertions(+) (limited to 'ipsilon/providers/saml2/rest.py') diff --git a/ipsilon/providers/saml2/rest.py b/ipsilon/providers/saml2/rest.py index 6ad8ae6..730b374 100644 --- a/ipsilon/providers/saml2/rest.py +++ b/ipsilon/providers/saml2/rest.py @@ -6,6 +6,7 @@ from ipsilon.providers.common import FACILITY from ipsilon.rest.common import rest_error, jsonout from ipsilon.providers.saml2.provider import ServiceProviderCreator from ipsilon.providers.saml2.provider import InvalidProviderId +from ipsilon.util.page import admin_protect from lasso import ServerAddProviderFailedError @@ -77,10 +78,12 @@ class SPS(RestProviderBase): return dict(result=results) @jsonout + @admin_protect def GET(self, *args, **kwargs): return self._get_sp(*args, **kwargs) @jsonout + @admin_protect def POST(self, *args, **kwargs): cherrypy.response.status = 201 -- cgit