summaryrefslogtreecommitdiff
path: root/archaeological_files
diff options
context:
space:
mode:
authorÉtienne Loks <etienne.loks@iggdrasil.net>2025-02-03 12:02:04 +0100
committerÉtienne Loks <etienne.loks@iggdrasil.net>2025-02-19 14:45:56 +0100
commit20fd9415b58aee61f30ee586930f9a06d5bbe4e9 (patch)
tree8c7e6bd2c05d207503f395196d7c65c023b3c323 /archaeological_files
parent9a6812367df13b1a2fa90bd65149f7998f3651c9 (diff)
downloadIshtar-20fd9415b58aee61f30ee586930f9a06d5bbe4e9.tar.bz2
Ishtar-20fd9415b58aee61f30ee586930f9a06d5bbe4e9.zip
🐛 menus: fix many permissions to add/moddify (refs #6118, #6115, #6110)
Diffstat (limited to 'archaeological_files')
-rw-r--r--archaeological_files/ishtar_menu.py7
-rw-r--r--archaeological_files/urls.py7
2 files changed, 9 insertions, 5 deletions
diff --git a/archaeological_files/ishtar_menu.py b/archaeological_files/ishtar_menu.py
index ecb27aa2b..37126039f 100644
--- a/archaeological_files/ishtar_menu.py
+++ b/archaeological_files/ishtar_menu.py
@@ -66,7 +66,10 @@ MENU_SECTIONS = [
"file_closing",
_("Closing"),
model=models.File,
- access_controls=["archaeological_files.close_file"],
+ access_controls=[
+ "archaeological_files.change_file",
+ "archaeological_files.change_own_file"
+ ],
),
MenuItem(
"file_deletion",
@@ -112,7 +115,7 @@ MENU_SECTIONS = [
_("Deletion"),
model=AdministrativeAct,
access_controls=[
- "archaeological_operations.delete_administrativeact"
+ "archaeological_operations.delete_administrativeact",
"archaeological_operations.delete_own_administrativeact"
],
),
diff --git a/archaeological_files/urls.py b/archaeological_files/urls.py
index 42c48a3d7..b30c5b95d 100644
--- a/archaeological_files/urls.py
+++ b/archaeological_files/urls.py
@@ -103,9 +103,10 @@ urlpatterns = [
url(r"^file_modify/(?P<pk>.+)/$", views.file_modify, name="file_modify"),
url(
r"^file_closing/(?P<step>.+)?$",
- check_permissions(
- ["archaeological_files.change_file"]
- )(views.file_closing_wizard),
+ check_permissions(["archaeological_files.change_file",
+ "archaeological_files.change_own_file"])(
+ views.file_closing_wizard
+ ),
name="file_closing",
),
url(