klmp200/Sith
1
0
Fork 0
mirror of https://github.com/ae-utbm/sith.git synced 2025-07-09 19:40:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add a restriction on the counter login view to authorize only the sellers

Browse Source
This commit is contained in:
Skia
2016-09-09 01:54:26 +02:00
parent 4c2bf9cbf9
commit 90e47c9d7d
4 changed files with 163 additions and 168 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
core/views/user.py
View File

@ -151,6 +151,7 @@ class UserTabsMixin(TabedViewMixin):
try:
if (self.object.customer and (self.object == self.request.user
or self.request.user.is_in_group(settings.SITH_GROUPS['accounting-admin']['name'])
or self.request.user.is_in_group(settings.SITH_BAR_MANAGER['unix_name']+settings.SITH_BOARD_SUFFIX)
or self.request.user.is_root)):
tab_list.append({
'url': reverse('core:user_account', kwargs={'user_id': self.object.id}),
@ -312,6 +313,7 @@ class UserAccountView(UserTabsMixin, DetailView):
res = super(UserAccountView, self).dispatch(request, *arg, **kwargs)
if (self.object == request.user
or request.user.is_in_group(settings.SITH_GROUPS['accounting-admin']['name'])
or request.user.is_in_group(settings.SITH_BAR_MANAGER['unix_name']+settings.SITH_BOARD_SUFFIX)
or request.user.is_root):
return res
raise PermissionDenied