From 21485ca6e2d3a56f816259608438ecb83166e0a2 Mon Sep 17 00:00:00 2001 From: Jeremy Stretch Date: Thu, 28 Sep 2017 16:04:37 -0400 Subject: [PATCH] Restrict the running of reports via API to POST requests --- docs/miscellaneous/reports.md | 0 netbox/extras/api/views.py | 2 +- 2 files changed, 1 insertion(+), 1 deletion(-) create mode 100644 docs/miscellaneous/reports.md diff --git a/docs/miscellaneous/reports.md b/docs/miscellaneous/reports.md new file mode 100644 index 000000000..e69de29bb diff --git a/netbox/extras/api/views.py b/netbox/extras/api/views.py index 81eb5e739..bd1d33fa3 100644 --- a/netbox/extras/api/views.py +++ b/netbox/extras/api/views.py @@ -143,7 +143,7 @@ class ReportViewSet(ViewSet): return Response(serializer.data) - @detail_route() + @detail_route(methods=['post']) def run(self, request, pk): """ Run a Report and create a new ReportResult, overwriting any previous result for the Report.