From d476b130074a18e0a903743bdd3e61b5f7f397b0 Mon Sep 17 00:00:00 2001 From: Cristian Date: Wed, 8 Jul 2020 14:46:31 -0500 Subject: [PATCH] fix: Add missing permission to add view (post) --- archivebox/core/views.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/archivebox/core/views.py b/archivebox/core/views.py index 0c5efff2..57941264 100644 --- a/archivebox/core/views.py +++ b/archivebox/core/views.py @@ -60,8 +60,8 @@ class AddLinks(View): return render(template_name=self.template, request=request, context=context) def post(self, request): - #url = request.POST['url'] - #if url: + if not request.user.is_authenticated and not PUBLIC_INDEX: + return redirect(f'/admin/login/?next={request.path}') form = AddLinkForm(request.POST) if form.is_valid(): url = form.cleaned_data["url"]