diff options
| author | Étienne Loks <etienne.loks@iggdrasil.net> | 2017-11-06 18:02:09 +0100 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2017-11-06 18:02:09 +0100 |
| commit | 85be17fd3cea1687402c4417089e35628b13d0f9 (patch) | |
| tree | a09ab49aafd41738737a4ecc9f37a11845751c74 /archaeological_finds/forms.py | |
| parent | 1c62bfa6e0138ed3018bd1c334f7f6ecbcb11d4f (diff) | |
| parent | 180f6fe58378e84b97ac3bf1beb36e08d13eeb70 (diff) | |
| download | Ishtar-85be17fd3cea1687402c4417089e35628b13d0f9.tar.bz2 Ishtar-85be17fd3cea1687402c4417089e35628b13d0f9.zip | |
Merge branch 'develop' into develop-bootstrap
Diffstat (limited to 'archaeological_finds/forms.py')
| -rw-r--r-- | archaeological_finds/forms.py | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/archaeological_finds/forms.py b/archaeological_finds/forms.py index 1f81cf52f..87aaf76a9 100644 --- a/archaeological_finds/forms.py +++ b/archaeological_finds/forms.py @@ -787,7 +787,7 @@ class FindBasketAddItemForm(forms.Form): def save(self, user): try: basket = models.FindBasket.objects.get( - pk=self.cleaned_data['basket_id'], user=user.ishtaruser) + pk=self.cleaned_data['basket_id'], user=user) item = models.Find.objects.get( pk=self.cleaned_data['item_id']) except models.FindBasket.DoesNotExist or\ @@ -795,9 +795,9 @@ class FindBasketAddItemForm(forms.Form): # something strange... TODO: log it raise PermissionDenied # check rights - if not user.is_superuser and \ - not user.ishtaruser.has_right('change_find') and \ - not (user.ishtaruser.has_right('change_own_find') + if not user.user_ptr.is_superuser and \ + not user.has_right('change_find') and \ + not (user.has_right('change_own_find') and item.is_own(user)): raise PermissionDenied basket.items.add(item) |