Adapt menus and urls for right management - check_rights_condition for filtering wizard steps

1 files changed, 24 insertions, 9 deletions

diff --git a/archaeological_files/urls.py b/archaeological_files/urls.py
index 30f50263a..1fcf71531 100644
--- a/archaeological_files/urls.py
+++ b/archaeological_files/urls.py
@@ -19,33 +19,48 @@
 
 from django.conf.urls.defaults import *
 
+from ishtar_common.wizards import check_rights
 import views
 
+# be carreful: each check_rights must be relevant with ishtar_menu
+
 # forms:
 urlpatterns = patterns(
     '',
     url(r'file_administrativeactfil_search/(?P<step>.+)?$',
-        views.file_administrativeactfile_search_wizard,
+        check_rights(['change_administrativeact'])(
+            views.file_administrativeactfile_search_wizard),
         name='file_administrativeactfile_search'),
     url(r'file_administrativeactfil/(?P<step>.+)?$',
-        views.file_administrativeactfile_wizard,
+        check_rights(['change_administrativeact'])(
+            views.file_administrativeactfile_wizard),
         name='file_administrativeactfile'),
     url(r'file_administrativeactfil_deletion/(?P<step>.+)?$',
-        views.file_administrativeactfile_deletion_wizard,
+        check_rights(['change_administrativeact'])(
+            views.file_administrativeactfile_deletion_wizard),
         name='file_administrativeactfile_deletion'),
     url(r'file_administrativeactfil_modification/(?P<step>.+)?$',
-        views.file_administrativeactfile_modification_wizard,
+        check_rights(['change_administrativeact'])(
+            views.file_administrativeactfile_modification_wizard),
         name='file_administrativeactfile_modification'),
-    url(r'file_search/(?P<step>.+)?$', views.file_search_wizard,
+    url(r'file_search/(?P<step>.+)?$',
+        check_rights(['view_file', 'view_own_file'])(
+            views.file_search_wizard),
         name='file_search'),
     url(r'file_creation/(?P<step>.+)?$',
-        views.file_creation_wizard, name='file_creation'),
+        check_rights(['add_file'])(
+            views.file_creation_wizard), name='file_creation'),
     url(r'file_modification/(?P<step>.+)?$',
-        views.file_modification_wizard, name='file_modification'),
+        check_rights(['change_file', 'change_own_file'])(
+            views.file_modification_wizard), name='file_modification'),
     url(r'file_modify/(?P<pk>.+)/$', views.file_modify, name='file_modify'),
-    url(r'file_closing/(?P<step>.+)?$', views.file_closing_wizard,
+    url(r'file_closing/(?P<step>.+)?$',
+        check_rights(['change_file'])(
+            views.file_closing_wizard),
         name='file_closing'),
-    url(r'file_deletion/(?P<step>.+)?$', views.file_deletion_wizard,
+    url(r'file_deletion/(?P<step>.+)?$',
+        check_rights(['delete_file', 'delete_own_file'])(
+            views.file_deletion_wizard),
         name='file_deletion'),
 )