From 8132e149f40ccb45e1810b387322e5fc5e0c9901 Mon Sep 17 00:00:00 2001 From: Alon Levy Date: Sun, 1 Mar 2015 18:51:02 +0200 Subject: rz_api: index: set correct role_set --- src/server/rz_api.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/server/rz_api.py b/src/server/rz_api.py index ec5fabf3..1388cd8b 100644 --- a/src/server/rz_api.py +++ b/src/server/rz_api.py @@ -130,9 +130,11 @@ def index(): # fetch rz_username for welcome message email_address = session.get('username') rz_username = "Anonymous Stranger" + role_set = [] if None != email_address: # session cookie passed & contains uid (email_address) try: uid, u_account = current_app.user_db.lookup_user__by_email_address(email_address) + role_set = u_account.role_set rz_username = escape(u_account.rz_username) except Exception as e: # may occur on user_db reset or malicious cookie != stale cookie, @@ -156,4 +158,4 @@ def index(): rz_config__hostname=hostname, rz_config__port=port, rz_config__optimized_main='true' if current_app.rz_config.optimized_main else 'false', - rz_config__role_set=['admin']) + rz_config__role_set=role_set) -- cgit v1.3.1