Merge remote-tracking branch 'sec_fixes/admin_update' into master

2020-10-31 20:02:42 +01:00
parent ff88e68904 8b60a19577
commit 130701a7bb
2 changed files with 3 additions and 1 deletions
--- a/cps/web.py
+++ b/cps/web.py
@ -308,6 +308,7 @@ def before_request():

@app.route('/import_ldap_users')
@login_required
+@admin_required
 def import_ldap_users():
    showtext = {}
    try: