commit/galaxy-central: jgoecks: Additional security for loading visualizations.
1 new changeset in galaxy-central: http://bitbucket.org/galaxy/galaxy-central/changeset/e132a1398caa/ changeset: e132a1398caa user: jgoecks date: 2011-06-27 23:25:32 summary: Additional security for loading visualizations. affected #: 1 file (60 bytes) --- a/lib/galaxy/web/controllers/tracks.py Mon Jun 27 16:58:52 2011 -0400 +++ b/lib/galaxy/web/controllers/tracks.py Mon Jun 27 17:25:32 2011 -0400 @@ -229,9 +229,7 @@ """ Display browser for the datasets listed in `dataset_ids`. """ - decoded_id = trans.security.decode_id( id ) - session = trans.sa_session - vis = session.query( model.Visualization ).get( decoded_id ) + vis = self.get_visualization( trans, id, check_ownership=False, check_accessible=True ) viz_config = self.get_visualization_config( trans, vis ) new_dataset = kwargs.get("dataset_id", None) Repository URL: https://bitbucket.org/galaxy/galaxy-central/ -- This is a commit notification from bitbucket.org. You are receiving this because you have the service enabled, addressing the recipient of this email.
participants (1)
-
Bitbucket