Use post method instead of get method when invoking the unsetup method from the api...

diff --git a/apps/workbench/app/views/users/_show_admin.html.erb b/apps/workbench/app/views/users/_show_admin.html.erb
index aa8b07c9acbef325a11a2644ce7d6c9dabb676cb..c43ce028b69be989205ad8533eaffeb44da2c368 100644 (file)
--- a/apps/workbench/app/views/users/_show_admin.html.erb
+++ b/apps/workbench/app/views/users/_show_admin.html.erb
@@ -9,7 +9,7 @@ account.</p>
 <p>As an admin, you can deactivate this user.</p>
 
 <blockquote>
-<%=  link_to "Deactivate #{@object.full_name}", { action: 'unsetup', id: @object.uuid }, { confirm: "Are you sure you want to deactivate #{@object.full_name}?", method: 'get' } %>
+<%=  link_to "Deactivate #{@object.full_name}", { action: 'unsetup', id: @object.uuid }, { confirm: "Are you sure you want to deactivate #{@object.full_name}?", method: 'post' } %>
 </blockquote>
 
 

diff --git a/apps/workbench/config/routes.rb b/apps/workbench/config/routes.rb
index 5525662893ab15d2b13726bdf6ce7506845706f0..6504df07ff89a117f49994a7cdf6237750d1f885 100644 (file)
--- a/apps/workbench/config/routes.rb
+++ b/apps/workbench/config/routes.rb
@@ -23,7 +23,7 @@ ArvadosWorkbench::Application.routes.draw do
     get 'welcome', :on => :collection
     get 'activity', :on => :collection
     post 'sudo', :on => :member
-    get 'unsetup', :on => :member
+    post 'unsetup', :on => :member
   end
   resources :logs
   resources :factory_jobs