fixed bug that deleteWorker has access from `vorstand`
This commit is contained in:
parent
e0c3581a4c
commit
0d1c116da7
|
@ -117,7 +117,7 @@ def _getUser(**kwargs):
|
||||||
return jsonify(retVal)
|
return jsonify(retVal)
|
||||||
|
|
||||||
@vorstand.route("/sm/deleteUser", methods=['POST'])
|
@vorstand.route("/sm/deleteUser", methods=['POST'])
|
||||||
@login_required(groups=[MONEY, GASTRO])
|
@login_required(groups=[MONEY, GASTRO, VORSTAND])
|
||||||
def _deletUser(**kwargs):
|
def _deletUser(**kwargs):
|
||||||
data = request.get_json()
|
data = request.get_json()
|
||||||
user = data['user']
|
user = data['user']
|
||||||
|
|
Loading…
Reference in New Issue