diff options
| author | Étienne Loks <etienne.loks@iggdrasil.net> | 2019-05-22 13:33:26 +0200 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2019-05-22 13:33:26 +0200 |
| commit | ad970ee2f6d54e801e9b617de739da2073038436 (patch) | |
| tree | 9c9a6de8138179961f4a7256fcac84a9dd651eeb /ishtar_common/models.py | |
| parent | ae7a4010c7dbb973dbc36053deda2d502d478c91 (diff) | |
| download | Ishtar-ad970ee2f6d54e801e9b617de739da2073038436.tar.bz2 Ishtar-ad970ee2f6d54e801e9b617de739da2073038436.zip | |
Find basket permissions: check on own_find for own_findbasket permission
Diffstat (limited to 'ishtar_common/models.py')
| -rw-r--r-- | ishtar_common/models.py | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/ishtar_common/models.py b/ishtar_common/models.py index 99c4c0449..7e6b6c5fd 100644 --- a/ishtar_common/models.py +++ b/ishtar_common/models.py @@ -302,9 +302,11 @@ class OwnPerms(object): splited = action_name.split('_') action_own_name = splited[0] + '_own_' + '_'.join(splited[1:]) user = request.user + if action_own_name == "view_own_findbasket": + action_own_name = "view_own_find" return user.ishtaruser.has_right(action_name, request.session) or \ - (user.ishtaruser.has_right(action_own_name, request.session) - and self.is_own(user.ishtaruser)) + (user.ishtaruser.has_right(action_own_name, request.session) + and self.is_own(user.ishtaruser)) def is_own(self, user, alt_query_own=None): """ |