mirror of
https://github.com/JonathanHerrewijnen/calibre-web.git
synced 2024-11-11 05:33:57 +00:00
Require edit permissions to edit books, even via ajax
This commit is contained in:
parent
5792838333
commit
e7f7775efa
@ -930,6 +930,7 @@ def convert_bookformat(book_id):
|
||||
|
||||
@editbook.route("/ajax/editbooks/<param>", methods=['POST'])
|
||||
@login_required_if_no_ano
|
||||
@edit_required
|
||||
def edit_list_book(param):
|
||||
vals = request.form.to_dict()
|
||||
# calibre_db.update_title_sort(config)
|
||||
|
Loading…
Reference in New Issue
Block a user