mirror of
https://github.com/ae-utbm/sith.git
synced 2024-11-26 02:54:20 +00:00
Merge branch 'sli' into 'master'
Quick fix to hide account number in profile page when not owner user or root Faut vite cacher les numéros de compte des gens à qui ils n'apartiennent pas, sinon c'est la faille de sécu D: See merge request !6
This commit is contained in:
commit
1e0904b48e
@ -57,7 +57,9 @@
|
|||||||
<p>
|
<p>
|
||||||
{% if get_subscriber(profile).is_subscribed() %}
|
{% if get_subscriber(profile).is_subscribed() %}
|
||||||
{% trans subscription_end=get_subscriber(profile).subscriptions.last().subscription_end %}Subscribed until {{ subscription_end }}{% endtrans %}<br/>
|
{% trans subscription_end=get_subscriber(profile).subscriptions.last().subscription_end %}Subscribed until {{ subscription_end }}{% endtrans %}<br/>
|
||||||
|
{% if user == profile or user.is_root %}
|
||||||
{% trans %}Account number: {% endtrans %}{{ profile.customer.account_id }}<br/>
|
{% trans %}Account number: {% endtrans %}{{ profile.customer.account_id }}<br/>
|
||||||
|
{% endif %}
|
||||||
{# Shows tokens bought by the user #}
|
{# Shows tokens bought by the user #}
|
||||||
{{ show_tokens(profile) }}
|
{{ show_tokens(profile) }}
|
||||||
{# Shows slots took by the user #}
|
{# Shows slots took by the user #}
|
||||||
|
Loading…
Reference in New Issue
Block a user