diff options
| author | Étienne Loks <etienne.loks@peacefrogs.net> | 2014-02-13 08:32:05 +0100 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@peacefrogs.net> | 2014-02-13 08:32:05 +0100 |
| commit | 1a956579f10aeb0ce8ff37a76525881da7ee2277 (patch) | |
| tree | 88f2c43c659d45c8e364cf45900e5bb40905c651 /ishtar_common/views.py | |
| parent | f382763bfe106abca8bad5a986afd15703f84d19 (diff) | |
| download | Ishtar-1a956579f10aeb0ce8ff37a76525881da7ee2277.tar.bz2 Ishtar-1a956579f10aeb0ce8ff37a76525881da7ee2277.zip | |
Add closing rights (refs #1628)
Diffstat (limited to 'ishtar_common/views.py')
| -rw-r--r-- | ishtar_common/views.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/ishtar_common/views.py b/ishtar_common/views.py index 5fc717c9f..ba583438c 100644 --- a/ishtar_common/views.py +++ b/ishtar_common/views.py @@ -201,10 +201,12 @@ def get_item(model, func_name, default_name, extra_request_keys=[], # if not specific any perm is relevant (read right) if specific_perms and perm not in specific_perms: continue - if request.user.has_perm(perm): + if request.user.has_perm(perm) \ + or request.user.ishtaruser.has_right(perm): allowed = True if "_own_" not in perm: own = False + break # max right reach if not allowed: return HttpResponse(None, mimetype='text/plain') if 'type' in dct: |