Adapt menus and urls for right management - check_rights_condition for filtering wizard steps

1 files changed, 26 insertions, 12 deletions

diff --git a/archaeological_operations/urls.py b/archaeological_operations/urls.py
index cc2c6f9ac..a6c4bd7b3 100644
--- a/archaeological_operations/urls.py
+++ b/archaeological_operations/urls.py
@@ -22,35 +22,46 @@ from django.conf.urls.defaults import *
 from ishtar_common.wizards import check_rights
 import views
 
+# be carreful: each check_rights must be relevant with ishtar_menu
+
 # forms
 urlpatterns = patterns(
     '',
     url(r'operation_administrativeactop_search/(?P<step>.+)?$',
-        views.operation_administrativeactop_search_wizard,
+        check_rights(['change_administrativeact'])(
+            views.operation_administrativeactop_search_wizard),
         name='operation_administrativeactop_search'),
     url(r'operation_administrativeactop/(?P<step>.+)?$',
-        views.operation_administrativeactop_wizard,
+        check_rights(['change_administrativeact'])(
+            views.operation_administrativeactop_wizard),
         name='operation_administrativeactop'),
     url(r'operation_administrativeactop_modification/(?P<step>.+)?$',
-        views.operation_administrativeactop_modification_wizard,
+        check_rights(['change_administrativeact'])(
+            views.operation_administrativeactop_modification_wizard),
         name='operation_administrativeactop_modification'),
     url(r'operation_administrativeactop_deletion/(?P<step>.+)?$',
-        views.operation_administrativeactop_deletion_wizard,
+        check_rights(['change_administrativeact'])(
+            views.operation_administrativeactop_deletion_wizard),
         name='operation_administrativeactop_deletion'),
     url(r'operation_source_search/(?P<step>.+)?$',
-        views.operation_source_search_wizard,
+        check_rights(['view_operation', 'view_own_operation'])(
+            views.operation_source_search_wizard),
         name='operation_source_search'),
     url(r'operation_source_creation/(?P<step>.+)?$',
-        views.operation_source_creation_wizard,
+        check_rights(['change_operation', 'change_own_operation'])(
+            views.operation_source_creation_wizard),
         name='operation_source_creation'),
     url(r'operation_source_modification/(?P<step>.+)?$',
-        views.operation_source_modification_wizard,
+        check_rights(['change_operation', 'change_own_operation'])(
+            views.operation_source_modification_wizard),
         name='operation_source_modification'),
     url(r'operation_source_deletion/(?P<step>.+)?$',
-        views.operation_source_deletion_wizard,
+        check_rights(['change_operation', 'change_own_operation'])(
+            views.operation_source_deletion_wizard),
         name='operation_source_deletion'),
     url(r'operation_search/(?P<step>.+)?$',
-        views.operation_search_wizard, name='operation_search'),
+        check_rights(['view_operation', 'view_own_operation'])(
+            views.operation_search_wizard), name='operation_search'),
     url(r'operation_creation/(?P<step>.+)?$',
         check_rights(['add_operation'])(views.operation_creation_wizard),
         name='operation_creation'),
@@ -63,11 +74,14 @@ urlpatterns = patterns(
     url(r'operation_modify/(?P<pk>.+)/$',
         views.operation_modify, name='operation_modify'),
     url(r'operation_closing/(?P<step>.+)?$',
-        views.operation_closing_wizard, name='operation_closing'),
+        check_rights(['change_operation'])(
+            views.operation_closing_wizard), name='operation_closing'),
     url(r'operation_deletion/(?P<step>.+)?$',
-        views.operation_deletion_wizard, name='operation_deletion'),
+        check_rights(['change_operation', 'change_own_operation'])(
+            views.operation_deletion_wizard), name='operation_deletion'),
     url(r'administrativact_register/(?P<step>.+)?$',
-        views.administrativact_register_wizard,
+        check_rights(['view_administrativeact', 'view_own_administrativeact'])(
+            views.administrativact_register_wizard),
         name='administrativact_register'),
 )