Merge pull request #2964 from bookwyrm-social/delete-announcement-view

Makes the delete announcement view post-only

bookwyrm/views/admin/announcements.py

@@ -5,6 +5,7 @@
 from django.template.response import TemplateResponse
 from django.utils.decorators import method_decorator
 from django.views import View
+from django.views.decorators.http import require_POST
 
 from bookwyrm import forms, models
 from bookwyrm.settings import PAGE_LENGTH
@@ -108,6 +109,7 @@ def post(self, request, announcement_id=None):
 
 @login_required
 @permission_required("bookwyrm.edit_instance_settings", raise_exception=True)
+@require_POST
 def delete_announcement(_, announcement_id):
     """delete announcement"""
     announcement = get_object_or_404(models.Announcement, id=announcement_id)