diff options
author | Étienne Loks <etienne.loks@iggdrasil.net> | 2021-04-02 07:32:10 +0200 |
---|---|---|
committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2021-04-02 07:32:10 +0200 |
commit | f22b0e2043f5210a0bae96586d8358bcaf7d1d49 (patch) | |
tree | 49d6259fba37c8db8212060c2cb1cd3a276d10f3 /ishtar_common/forms.py | |
parent | e9cb2d44319fc24a3d2c58956264e4f95de399f8 (diff) | |
download | Ishtar-f22b0e2043f5210a0bae96586d8358bcaf7d1d49.tar.bz2 Ishtar-f22b0e2043f5210a0bae96586d8358bcaf7d1d49.zip |
Forms: fix permissions evaluation on field options
Diffstat (limited to 'ishtar_common/forms.py')
-rw-r--r-- | ishtar_common/forms.py | 29 |
1 files changed, 20 insertions, 9 deletions
diff --git a/ishtar_common/forms.py b/ishtar_common/forms.py index f5ddee48e..bc74001dc 100644 --- a/ishtar_common/forms.py +++ b/ishtar_common/forms.py @@ -672,15 +672,26 @@ class IshtarForm(forms.Form, BSForm): self.fields[site_key].label = profile.get_site_label( self.SITE_KEYS[site_key] ) - for field_name, permissions, options in self.OPTIONS_PERMISSIONS: - if field_name not in self.fields or not getattr(self, "user", None): - continue - if not [ - True for permission in permissions if self.user.has_perm(permission) - ]: - continue - for option, value in options.items(): - setattr(self.fields[field_name].widget, option, value) + user = getattr(self, "user", None) + ishtar_user = None + if user: + try: + ishtar_user = models.IshtarUser.objects.get(pk=user.pk) + except models.IshtarUser.DoesNotExist: + pass + if ishtar_user: + for field_name, permissions, options in self.OPTIONS_PERMISSIONS: + if field_name not in self.fields: + continue + + if not any( + True + for permission in permissions + if ishtar_user.has_perm(permission) + ): + continue + for option, value in options.items(): + setattr(self.fields[field_name].widget, option, value) self._post_init() def _init_type(self, field): |