require user password before transferring an alias (#1070)
This commit is contained in:
parent
0afd414a66
commit
a0a92a7562
|
@ -5,6 +5,7 @@ from flask_login import login_required, current_user
|
||||||
|
|
||||||
from app.config import URL
|
from app.config import URL
|
||||||
from app.dashboard.base import dashboard_bp
|
from app.dashboard.base import dashboard_bp
|
||||||
|
from app.dashboard.views.enter_sudo import sudo_required
|
||||||
from app.db import Session
|
from app.db import Session
|
||||||
from app.email_utils import send_email, render
|
from app.email_utils import send_email, render
|
||||||
from app.extensions import limiter
|
from app.extensions import limiter
|
||||||
|
@ -77,6 +78,7 @@ def transfer(alias, new_user, new_mailboxes: [Mailbox]):
|
||||||
|
|
||||||
@dashboard_bp.route("/alias_transfer/send/<int:alias_id>/", methods=["GET", "POST"])
|
@dashboard_bp.route("/alias_transfer/send/<int:alias_id>/", methods=["GET", "POST"])
|
||||||
@login_required
|
@login_required
|
||||||
|
@sudo_required
|
||||||
def alias_transfer_send_route(alias_id):
|
def alias_transfer_send_route(alias_id):
|
||||||
alias = Alias.get(alias_id)
|
alias = Alias.get(alias_id)
|
||||||
if not alias or alias.user_id != current_user.id:
|
if not alias or alias.user_id != current_user.id:
|
||||||
|
|
|
@ -10,10 +10,10 @@
|
||||||
<div class="card-body">
|
<div class="card-body">
|
||||||
<h1 class="h2">Entering Sudo Mode</h1>
|
<h1 class="h2">Entering Sudo Mode</h1>
|
||||||
<p>
|
<p>
|
||||||
You are trying to change sensitive settings
|
The next page contains security related setting.
|
||||||
</p>
|
</p>
|
||||||
<p>
|
<p>
|
||||||
Please enter the password of your account so that we can ensure it's you.
|
Please enter your account password so that we can ensure it's you.
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
<form method="post">
|
<form method="post">
|
||||||
|
|
Loading…
Reference in a new issue