trustchain-oc1-orchestral
/
devicehub-teal
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

check if the validate user is one of the users of the trade

This commit is contained in:
Cayo Puigdefabregas 2021-04-09 20:12:30 +02:00
parent affeea4f52
commit 48894567c3
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ereuse_devicehub/resources/action/views.py
View File

@ -363,6 +363,9 @@ class ActionView(View):
""" """
if offer.user_from_id and offer.user_to_id: if offer.user_from_id and offer.user_to_id:
# check than the user than want to do the action is one of the users
# involved in the action
assert g.user.id in [offer.user_from_id, offer.user_to_id]
return return
if offer.user_from_id and not offer.user_to_id: if offer.user_from_id and not offer.user_to_id:
@ -403,6 +406,7 @@ class ActionView(View):
# Create a new Trade # Create a new Trade
trade = Trade(accepted_by_from=True, trade = Trade(accepted_by_from=True,
accepted_by_to=True, accepted_by_to=True,
confirm_transfer=True,
offer=offer, offer=offer,
devices=offer.devices devices=offer.devices
) )