Skip to content

Prevent non_admin_view from showing SetupView to unprivileged users

I don't know why the branch name is sooooo long. The source branch should be deleted when merge request is accepted.

Closes #2094 (closed)

Plinth displays the SetupView instead of the app-mounted view if the app is not installed. If all views in /plinth/apps/<app_name>/* are admin-only, this behavior is desired. Once we introduce unprivileged views in /plinth/apps/<app_name>/*, the same behavior is no longer desired.

We can override the SetupView display logic by wrapping the view's dispatch function. This MR does exactly that. It simply returns a 400 error for unprivileged users.

Edited by Flynn

Merge request reports

Loading