Add PATCH /api/groups/:pubid/members/:userid to cookie auth allow-list

hypothesis · Nov 25, 2024 · a1693d9 · a1693d9
1 parent bbea36d
commit a1693d9
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/h/security/policy/_api_cookie.py b/h/security/policy/_api_cookie.py
@@ -10,6 +10,7 @@
     ("api.group", "PATCH"),  # Edit an existing group.
     ("api.group_members", "GET"),  # List group members
     ("api.group_member", "DELETE"),  # Remove member from a group
+    ("api.group_member", "PATCH"),  # Update group membership
 ]