From e0a009a0f1d466821d048fe1ca187bb1b9e1d2fe Mon Sep 17 00:00:00 2001 From: Adam Kelly Date: Mon, 1 Jun 2020 22:02:38 +0100 Subject: [PATCH] Reject registrations if not allowed by settings. --- fedireads/view_actions.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/fedireads/view_actions.py b/fedireads/view_actions.py index b8903b38f..fe9168712 100644 --- a/fedireads/view_actions.py +++ b/fedireads/view_actions.py @@ -8,6 +8,7 @@ from django.core.files.base import ContentFile from django.http import HttpResponseBadRequest, HttpResponseNotFound from django.shortcuts import redirect from django.template.response import TemplateResponse +from django.core.exceptions import PermissionDenied from fedireads import books_manager from fedireads import forms, models, outgoing @@ -49,6 +50,9 @@ def register(request): if request.method == 'GET': return redirect('/login') + if not models.SiteSettings.get().allow_registration: + raise PermissionDenied + form = forms.RegisterForm(request.POST) if not form.is_valid(): return redirect('/register/')