also check policy on key updates

dgruss · web-flow · commit a732a50ca840 · 2022-12-23T23:46:38.000+01:00
so far, the policy was only checked when adding new entries. now the policy is also checked when updating entries. otherwise it is easy to get non-policy conforming entries into the database
diff --git a/server.py b/server.py
@@ -249,6 +249,13 @@ def replace_entry(key):
     if not ok:
         return jsonify(reason)
 
+    if policy and "force" not in request.json:
+        accept, reason = policy.check(request.json["entry"], bib_database.entries)
+        if not accept:
+            entry = request.json["entry"]
+            entry["reason"] = reason
+            return jsonify({"success": False, "reason": "policy", "entries": [entry]})
+
     for (idx, entry) in enumerate(bib_database.entries):
         if entry["ID"] == key:
             bib_database.entries[idx] = request.json["entry"]
