diff options
| author | Étienne Loks <etienne.loks@iggdrasil.net> | 2016-12-04 01:06:31 +0100 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2016-12-04 01:06:31 +0100 |
| commit | f662227d67566d134071d651376484fdd90eae56 (patch) | |
| tree | 4078f8bd4cfda4b6cdfd017ba1e5a5bfc195c78a /archaeological_finds/wizards.py | |
| parent | c02bcd0e6c47c2cb3ce8b9b8927e408020e3a122 (diff) | |
| download | Ishtar-f662227d67566d134071d651376484fdd90eae56.tar.bz2 Ishtar-f662227d67566d134071d651376484fdd90eae56.zip | |
Treatment: manage treatment with baskets
Diffstat (limited to 'archaeological_finds/wizards.py')
| -rw-r--r-- | archaeological_finds/wizards.py | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/archaeological_finds/wizards.py b/archaeological_finds/wizards.py index 9c91ac516..962f21e69 100644 --- a/archaeological_finds/wizards.py +++ b/archaeological_finds/wizards.py @@ -107,10 +107,13 @@ class TreatmentWizard(Wizard): and not find.is_own(dct['history_modifier']): raise PermissionDenied dct['items'] = [find] - except (models.Find.DoesNotExist): + except models.Find.DoesNotExist: raise PermissionDenied if 'basket' in dct: - dct.pop('basket') + basket = dct.pop('basket') + if basket.user.pk != dct['history_modifier'].pk: + raise PermissionDenied + dct['items'] = list(basket.items.all()) return dct |