[fix] Avoid admin part of apps to be reachable from visitors

This commit is contained in:
ljf (zamentur) 2021-02-11 18:35:35 +01:00 committed by GitHub
parent 933b73400b
commit 958c052f1e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -280,7 +280,7 @@ def migrate_legacy_permission_settings(app=None):
auth_header=True,
label=legacy_permission_label(app, "protected"),
show_tile=False,
allowed=user_permission_list()["permissions"][app + ".main"]["allowed"],
allowed=[],
protected=True,
sync_perm=False,
)