Validate user authentication and api address

mozilla · Jun 30, 2020 · 0be30f1 · 0be30f1
1 parent 093cfad
commit 0be30f1
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/emails/views.py b/emails/views.py
@@ -42,9 +42,11 @@
 def index(request):
     incr_if_enabled('emails_index', 1)
     request_data = get_post_data_from_request(request)
-    if (not request.user.is_authenticated and
-        not request_data.get("api_token", False)
-       ):
+    is_validated_user = (
+        request.user.is_authenticated and
+        request_data.get("api_token", False)
+    )
+    if not is_validated_user:
         raise PermissionDenied
     if request.method == 'POST':
         return _index_POST(request)