[fix] Avoid admin part of apps to be reachable from visitors

This commit is contained in:
ljf (zamentur) 2021-02-11 18:35:35 +01:00 committed by Alexandre Aubin
parent e1062f1457
commit 29bd3c4a26

View file

@ -189,7 +189,7 @@ def migrate_legacy_permission_settings(app=None):
if protected_urls != []:
permission_create(app + ".legacy_protected_uris", additional_urls=protected_urls,
auth_header=True, label=legacy_permission_label(app, "protected"),
show_tile=False, allowed=user_permission_list()['permissions'][app + ".main"]['allowed'],
show_tile=False, allowed=[],
protected=True, sync_perm=False)
legacy_permission_settings = [