mirror of https://github.com/zulip/zulip.git
7d0917c3c7
It's best for these to just be consistent. Therefore:
1. The .../not-configured/ error page endpoint should be restricted to
.has_billing_access users only.
2. For consistency, self_hosting_auth_view_common is tweaked to also do
the .has_billing_access check as the first thing, to avoid revealing
configuration information via its redirect/error-handling behavior.
The revealed configuration information seems super harmless, but it's
simpler to not have to worry about it and just be consistent.
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| lib | ||
| management | ||
| migrations | ||
| tests | ||
| views | ||
| __init__.py | ||
| models.py | ||
| urls.py | ||