diff options
| author | Étienne Loks <etienne.loks@peacefrogs.net> | 2014-02-13 08:32:05 +0100 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@peacefrogs.net> | 2014-02-13 08:32:05 +0100 |
| commit | c2bf87686249358165436c2199e1c104817b294e (patch) | |
| tree | 88f2c43c659d45c8e364cf45900e5bb40905c651 /ishtar_common/views.py | |
| parent | 73dfcac879ad06aa6ea82a98f33a64df13d1aa25 (diff) | |
| download | Ishtar-c2bf87686249358165436c2199e1c104817b294e.tar.bz2 Ishtar-c2bf87686249358165436c2199e1c104817b294e.zip | |
Add closing rights (refs #1628)
Diffstat (limited to 'ishtar_common/views.py')
| -rw-r--r-- | ishtar_common/views.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/ishtar_common/views.py b/ishtar_common/views.py index 5fc717c9f..ba583438c 100644 --- a/ishtar_common/views.py +++ b/ishtar_common/views.py @@ -201,10 +201,12 @@ def get_item(model, func_name, default_name, extra_request_keys=[], # if not specific any perm is relevant (read right) if specific_perms and perm not in specific_perms: continue - if request.user.has_perm(perm): + if request.user.has_perm(perm) \ + or request.user.ishtaruser.has_right(perm): allowed = True if "_own_" not in perm: own = False + break # max right reach if not allowed: return HttpResponse(None, mimetype='text/plain') if 'type' in dct: |