heckyel/mediagoblin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

List blogs by URL user rather than request user

Browse Source 
The blog_post_listing function in mediagoblin/media_types/blow/views.py
attempts to access blogs based on the requesting user rather than the url
user. This results in server errors when an unauthenticated user attempts to
follow a link from another user's blog post listing, and 404 errors when an
authenticated user attempts to follow a link from another user's blog post
listing.

This change bases blog post listings on the URL user rather than the request
user.
This commit is contained in:
ayleph 2014-08-16 10:45:58 -07:00 committed by Jessica Tallon
parent 3322a63df4
commit b56cd89eb8
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
mediagoblin/media_types/blog/views.py
View File

@ -260,7 +260,7 @@ def blog_post_listing(request, page, url_user=None):
Page, listing all the blog posts of a particular blog.
"""
blog_slug = request.matchdict.get('blog_slug', None)
blog = get_blog_by_slug(request, blog_slug, author=request.user.id)
blog = get_blog_by_slug(request, blog_slug, author=url_user.id)
if not blog:
return render_404(request)