fixed issue 828, related to rest security, thanks Clifford

2012-06-02 14:45:52 -05:00
parent f479e0dd31
commit fc7c6d5697
2 changed files with 5 additions and 1 deletions
@@ -1 +1 @@
-Version 2.00.0 (2012-06-02 14:36:15) dev
+Version 2.00.0 (2012-06-02 14:45:50) dev
@@ -6584,6 +6584,10 @@ def index():
                    # # print 're3:'+tag
                    field = args[i]
                    if not field in db[table]: break
+                    # hand-built patterns should respect .readable=False as well
+                    if not db[table][field].readable:
+                        return Row({'status':418,'pattern':pattern,
+                                    'error':'I\'m a teapot','response':None})
                    try:
                        item =  dbset.select(db[table][field],limitby=(0,1)).first()
                    except ValueError: