From 02faf93b2dd7c02af7ecdc38bf080e879c38e8ad Mon Sep 17 00:00:00 2001 From: Andrew Williams Date: Mon, 18 Jul 2011 15:35:42 +0100 Subject: [PATCH] Restrict values returned down to whats needed --- app/api/handlers/v1.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/api/handlers/v1.py b/app/api/handlers/v1.py index 9d88dd7..cdf1cfb 100644 --- a/app/api/handlers/v1.py +++ b/app/api/handlers/v1.py @@ -74,8 +74,8 @@ class LoginHandler(BaseHandler): if u: if request.GET.get('pass', None) and u.is_active and request.GET['pass'] == u.get_profile().api_service_password: return {'auth': 'ok', 'id': u.id, 'username': u.username, - 'email': u.email, 'groups': u.groups.all(), - 'staff': u.is_staff, 'superuser': u.is_superuser, 'primarycharacter': u.get_profile().primary_character } + 'email': u.email, 'groups': u.groups.all().values('id', 'name'), + 'staff': u.is_staff, 'superuser': u.is_superuser, 'primarycharacter': u.get_profile().primary_character.values('id', 'name', 'corporation')} else: return {'auth': 'failed'}