howler-api 2.11.0.dev236__tar.gz → 2.11.0.dev240__tar.gz

{howler_api-2.11.0.dev236 → howler_api-2.11.0.dev240}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: howler-api
-Version: 2.11.0.dev236
+Version: 2.11.0.dev240
 Summary: Howler - API server
 License: MIT
 Keywords: howler,alerting,gc,canada,cse-cst,cse,cst,cyber,cccs

{howler_api-2.11.0.dev236 → howler_api-2.11.0.dev240}/howler/api/v1/view.py

@@ -1,15 +1,7 @@
 from flask import request
 from mergedeep.mergedeep import merge
 
-from howler.api import (
-    bad_request,
-    created,
-    forbidden,
-    make_subapi_blueprint,
-    no_content,
-    not_found,
-    ok,
-)
+from howler.api import bad_request, created, forbidden, make_subapi_blueprint, no_content, not_found, ok
 from howler.common.exceptions import HowlerException
 from howler.common.loader import datastore
 from howler.common.logging import get_logger
@@ -185,8 +177,8 @@ def update_view(id: str, user: User, **kwargs):
     if not isinstance(new_data, dict):
         return bad_request(err="Invalid data format")
 
-    if set(new_data.keys()) - {"title", "query", "span", "sort", "settings"}:
-        return bad_request(err="Only title, query, span and sort can be updated.")
+    if set(new_data.keys()) & {"view_id", "owner"}:
+        return bad_request(err="You cannot change the owner or id of a view.")
 
     existing_view: View = storage.view.get_if_exists(id)
     if not existing_view:

{howler_api-2.11.0.dev236 → howler_api-2.11.0.dev240}/pyproject.toml

@@ -148,7 +148,7 @@ suppress-none-returning = true
 [tool.poetry]
 package-mode = true
 name = "howler-api"
-version = "2.11.0.dev236"
+version = "2.11.0.dev240"
 description = "Howler - API server"
 authors = [
     "Canadian Centre for Cyber Security <howler@cyber.gc.ca>",