diff options
| author | Étienne Loks <etienne.loks@iggdrasil.net> | 2026-06-11 11:46:56 +0200 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2026-06-11 11:46:56 +0200 |
| commit | 5f1576adeccf4fb15eada13484515ac74422bd28 (patch) | |
| tree | 470bfa9892a1637d5ecc79ed55e60cf89e8030fe | |
| parent | db9e6046f95dc7add2280ceb19a7e585366e3125 (diff) | |
| download | Ishtar-5f1576adeccf4fb15eada13484515ac74422bd28.tar.bz2 Ishtar-5f1576adeccf4fb15eada13484515ac74422bd28.zip | |
🐛 fix permissions: relation form - autocomplete biographical notes
| -rw-r--r-- | archaeological_finds/urls.py | 2 | ||||
| -rw-r--r-- | archaeological_operations/views.py | 2 | ||||
| -rw-r--r-- | ishtar_common/views.py | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/archaeological_finds/urls.py b/archaeological_finds/urls.py index 60c6e566e..40e26ce01 100644 --- a/archaeological_finds/urls.py +++ b/archaeological_finds/urls.py @@ -100,7 +100,7 @@ urlpatterns = [ name="find-dating-delete", ), path( - "find-relations-modify/<int:pk>)/", + "find-relations-modify/<int:pk>/", check_permissions( ["archaeological_finds.change_find", "archaeological_finds.change_own_find"] diff --git a/archaeological_operations/views.py b/archaeological_operations/views.py index f2117c747..fcdb573ab 100644 --- a/archaeological_operations/views.py +++ b/archaeological_operations/views.py @@ -502,7 +502,7 @@ def get_relation_modify(model, model_relation, formset_class, url_name, if "_own_" in current_right: if not request.user.has_perm(current_right, item): raise PermissionDenied() - elif current_right: + elif current_right and current_right != "administrator": if not request.user.has_perm(current_right): raise PermissionDenied() relations = model_relation.objects.filter(left_record_id=pk).all() diff --git a/ishtar_common/views.py b/ishtar_common/views.py index 965c9b0d1..e346e625d 100644 --- a/ishtar_common/views.py +++ b/ishtar_common/views.py @@ -1185,7 +1185,7 @@ def autocomplete_author(request): def autocomplete_biographical_note(request): - query = get_autocomplete_query(request, "ishtar_common", "BiographicalNote") + query = get_autocomplete_query(request, "ishtar_common", "biographicalnote") if query is None: return HttpResponse("[]", content_type="text/plain") q = request.GET.get("term", "") |