From fe31d8cfda5b17ea5467579f80dd7eed094a3df3 Mon Sep 17 00:00:00 2001
From: Julien Constant <julienconstant190@gmail.com>
Date: Sun, 12 Mar 2023 14:06:42 +0100
Subject: [PATCH] Fix SAS being accessible for non-connected users (wtf)

---
 locale/fr/LC_MESSAGES/django.po |   4 ++
 sas/templates/sas/main.jinja    | 114 +++++++++++++++++---------------
 2 files changed, 64 insertions(+), 54 deletions(-)

diff --git a/locale/fr/LC_MESSAGES/django.po b/locale/fr/LC_MESSAGES/django.po
index 76ef05fb..6017b925 100644
--- a/locale/fr/LC_MESSAGES/django.po
+++ b/locale/fr/LC_MESSAGES/django.po
@@ -5301,6 +5301,10 @@ msgstr "Cet album ne contient aucune photo."
 msgid "preview"
 msgstr "miniature"
 
+#: sas/templates/sas/main.jinja:42
+msgid "You must be logged in to see the SAS."
+msgstr "Vous devez être connecté pour voir les photos."
+
 #: sas/templates/sas/album.jinja:89
 msgid "Upload"
 msgstr "Envoyer"
diff --git a/sas/templates/sas/main.jinja b/sas/templates/sas/main.jinja
index c4d7bab6..cc8c6f07 100644
--- a/sas/templates/sas/main.jinja
+++ b/sas/templates/sas/main.jinja
@@ -37,67 +37,73 @@
 
 {% block content %}
     <h3>{% trans %}SAS{% endtrans %}</h3>
-    <br>
-    <h4>{% trans %}Latest albums{% endtrans %}</h4>
-    <div class="albums">
-        {% for a in latest %}
-            {{ display_album(a) }}
-        {% endfor %}
-    </div>
 
-    <br>
-
-    {% if edit_mode %}
-        <form action="" method="post" enctype="multipart/form-data">
-            {% csrf_token %}
-
-            <div class="navbar">
-                <h4>{% trans %}All categories{% endtrans %}</h4>
-            
-                {# <div class="toolbar">
-                    <input name="delete" type="submit" value="{% trans %}Delete{% endtrans %}">
-                </div> #}
-            </div>
-
-            {% if clipboard %}
-                <div class="clipboard">
-                    {% trans %}Clipboard: {% endtrans %}
-                    <ul>
-                        {% for f in clipboard %}
-                        <li>{{ f.get_full_path() }}</li>
-                        {% endfor %}
-                    </ul>
-                    <input name="clear" type="submit" value="{% trans %}Clear clipboard{% endtrans %}">
-                </div>
-            {% endif %}
+    {% if not user.is_authenticated %}
+        <p>{% trans %}You must be logged in to see the SAS.{% endtrans %}</p>
     {% else %}
-        <h4>{% trans %}All categories{% endtrans %}</h4>
-    {% endif %}
+        <br>
+        <h4>{% trans %}Latest albums{% endtrans %}</h4>
 
-    <div class="albums">
-        {% for a in categories %}
-            {{ display_album(a, true) }}
-        {% endfor %}
-    </div>
-
-    {% if edit_mode %}
-        </form>
+        <div class="albums">
+            {% for a in latest %}
+                {{ display_album(a) }}
+            {% endfor %}
+        </div>
 
         <br>
 
-        <form class="add-files" action="" method="post" enctype="multipart/form-data">
-            {% csrf_token %}
+        {% if edit_mode %}
+            <form action="" method="post" enctype="multipart/form-data">
+                {% csrf_token %}
 
-            <div class="inputs">
-                <div>
-                    <label for="{{ form.album_name.name }}">{{ form.album_name.label }}</label>
-                    {{ form.album_name }}
+                <div class="navbar">
+                    <h4>{% trans %}All categories{% endtrans %}</h4>
+                
+                    {# <div class="toolbar">
+                        <input name="delete" type="submit" value="{% trans %}Delete{% endtrans %}">
+                    </div> #}
                 </div>
-                <input type="submit" value="{% trans %}Create{% endtrans %}" />
-            </div>
-            
-            {{ form.non_field_errors() }}
-            {{ form.album_name.errors }}
-        </form>
+
+                {% if clipboard %}
+                    <div class="clipboard">
+                        {% trans %}Clipboard: {% endtrans %}
+                        <ul>
+                            {% for f in clipboard %}
+                            <li>{{ f.get_full_path() }}</li>
+                            {% endfor %}
+                        </ul>
+                        <input name="clear" type="submit" value="{% trans %}Clear clipboard{% endtrans %}">
+                    </div>
+                {% endif %}
+        {% else %}
+            <h4>{% trans %}All categories{% endtrans %}</h4>
+        {% endif %}
+
+        <div class="albums">
+            {% for a in categories %}
+                {{ display_album(a, true) }}
+            {% endfor %}
+        </div>
+
+        {% if edit_mode %}
+            </form>
+
+            <br>
+
+            <form class="add-files" action="" method="post" enctype="multipart/form-data">
+                {% csrf_token %}
+
+                <div class="inputs">
+                    <div>
+                        <label for="{{ form.album_name.name }}">{{ form.album_name.label }}</label>
+                        {{ form.album_name }}
+                    </div>
+                    <input type="submit" value="{% trans %}Create{% endtrans %}" />
+                </div>
+                
+                {{ form.non_field_errors() }}
+                {{ form.album_name.errors }}
+            </form>
+        {% endif %}
     {% endif %}
 {% endblock %}