From 5c560db8102b8ce6dc29bf91ab5e24ca4af66fdf Mon Sep 17 00:00:00 2001 From: Joram Wilander Date: Tue, 13 Feb 2018 11:08:49 -0500 Subject: ABC-176 Prevent changing PluginSettings.EnableUploads through the API (#8249) * Prevent changing PluginSettings.EnableUploads through the API * Contain api4 test case in it's own test --- api4/system.go | 3 +++ 1 file changed, 3 insertions(+) (limited to 'api4/system.go') diff --git a/api4/system.go b/api4/system.go index 061ffe094..2355cb476 100644 --- a/api4/system.go +++ b/api4/system.go @@ -121,6 +121,9 @@ func updateConfig(c *Context, w http.ResponseWriter, r *http.Request) { return } + // Do not allow plugin uploads to be toggled through the API + cfg.PluginSettings.EnableUploads = c.App.GetConfig().PluginSettings.EnableUploads + err := c.App.SaveConfig(cfg, true) if err != nil { c.Err = err -- cgit v1.2.3-1-g7c22