Merge branch 'sli' into 'master'

Quick fix to hide account number in profile page when not owner user or root

Faut vite cacher les numéros de compte des gens à qui ils n'apartiennent pas, sinon c'est la faille de sécu D:

See merge request !6
This commit is contained in:
Skia 2016-09-19 20:43:33 +02:00
commit 1e0904b48e

View File

@ -57,7 +57,9 @@
<p>
{% if get_subscriber(profile).is_subscribed() %}
{% trans subscription_end=get_subscriber(profile).subscriptions.last().subscription_end %}Subscribed until {{ subscription_end }}{% endtrans %}<br/>
{% if user == profile or user.is_root %}
{% trans %}Account number: {% endtrans %}{{ profile.customer.account_id }}<br/>
{% endif %}
{# Shows tokens bought by the user #}
{{ show_tokens(profile) }}
{# Shows slots took by the user #}