Adapt menus and urls for right management - check_rights_condition for filtering wizard steps

2 files changed, 18 insertions, 7 deletions

diff --git a/archaeological_finds/ishtar_menu.py b/archaeological_finds/ishtar_menu.py
index 8034d96e7..a688adbb4 100644
--- a/archaeological_finds/ishtar_menu.py
+++ b/archaeological_finds/ishtar_menu.py
@@ -1,6 +1,6 @@
 #!/usr/bin/env python
 # -*- coding: utf-8 -*-
-# Copyright (C) 2012 Étienne Loks  <etienne.loks_AT_peacefrogsDOTnet>
+# Copyright (C) 2012-2015 Étienne Loks  <etienne.loks_AT_peacefrogsDOTnet>
 
 # This program is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Affero General Public License as
@@ -23,6 +23,8 @@ from ishtar_common.menu_base import SectionItem, MenuItem
 
 import models
 
+# be carreful: each access_controls must be relevant with check_rights in urls
+
 MENU_SECTIONS = [
     (50,
      SectionItem(
diff --git a/archaeological_finds/urls.py b/archaeological_finds/urls.py
index b16752911..29f502e15 100644
--- a/archaeological_finds/urls.py
+++ b/archaeological_finds/urls.py
@@ -19,27 +19,36 @@
 
 from django.conf.urls.defaults import *
 
+from ishtar_common.wizards import check_rights
 import views
 
+# be carreful: each check_rights must be relevant with ishtar_menu
+
 # forms
 urlpatterns = patterns(
     '',
     url(r'find_search/(?P<step>.+)?$',
-        views.find_search_wizard, name='find_search'),
+        check_rights(['view_find', 'view_own_find'])(
+            views.find_search_wizard), name='find_search'),
     url(r'find_creation/(?P<step>.+)?$',
-        views.find_creation_wizard, name='find_creation'),
+        check_rights(['add_find'])(
+            views.find_creation_wizard), name='find_creation'),
     url(r'find_modification/(?P<step>.+)?$',
-        views.find_modification_wizard, name='find_modification'),
+        check_rights(['change_find', 'change_own_find'])(
+            views.find_modification_wizard), name='find_modification'),
     url(r'find_modify/(?P<pk>.+)/$',
         views.find_modify, name='find_modify'),
     url(r'find_source_creation/(?P<step>.+)?$',
-        views.find_source_creation_wizard,
+        check_rights(['change_find', 'change_own_find'])(
+            views.find_source_creation_wizard),
         name='find_source_creation'),
     url(r'find_source_modification/(?P<step>.+)?$',
-        views.find_source_modification_wizard,
+        check_rights(['change_find', 'change_own_find'])(
+            views.find_source_modification_wizard),
         name='find_source_modification'),
     url(r'find_source_deletion/(?P<step>.+)?$',
-        views.find_source_deletion_wizard,
+        check_rights(['change_find', 'change_own_find'])(
+            views.find_source_deletion_wizard),
         name='find_source_deletion'),
 )