From a24c2841a466310757edb33d474c886a37c75fcb Mon Sep 17 00:00:00 2001
From: Peter Stanko <peter.stanko0@gmail.com>
Date: Sun, 5 Aug 2018 15:14:47 +0200
Subject: [PATCH] Whitelisted the description

---
 portal/rest/schemas.py    | 2 +-
 portal/service/courses.py | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/portal/rest/schemas.py b/portal/rest/schemas.py
index a9b2645..6f5a30f 100644
--- a/portal/rest/schemas.py
+++ b/portal/rest/schemas.py
@@ -338,7 +338,7 @@ course_schema = CourseSchema(strict=True)
 course_schema_reduced = CourseSchema(
     strict=True, only=(*ALWAYS_ALLOWED, 'name', 'codename',))
 courses_schema = CourseSchema(many=True, only=(
-    *ALWAYS_ALLOWED, 'name', 'codename'))
+    *ALWAYS_ALLOWED, 'name', 'codename', 'description'))
 course_import_schema = CourseImportSchema(strict=True)
 group_schema = GroupSchema(strict=True)
 groups_schema = GroupSchema(many=True, only=(
diff --git a/portal/service/courses.py b/portal/service/courses.py
index bc2d9f1..481d5f3 100644
--- a/portal/service/courses.py
+++ b/portal/service/courses.py
@@ -52,7 +52,7 @@ def delete_course(course: Course):
 
 
 def __set_course_props(course: Course, data: dict):
-    return general.update_entity(course, data, allowed=['name', 'codename'])
+    return general.update_entity(course, data, allowed=['name', 'codename', 'description'])
 
 
 def update_course(course: Course, data: dict) -> Course:
-- 
GitLab