From 550574b2f883e730b2881597bfb2e49015454821 Mon Sep 17 00:00:00 2001
From: Étienne Loks <etienne.loks@iggdrasil.net>
Date: Wed, 20 Nov 2024 15:47:40 +0100
Subject: 🐛 fix administrative act permissions
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 archaeological_files/ishtar_menu.py |  9 ++++++---
 archaeological_files/urls.py        | 15 +++++++++++----
 2 files changed, 17 insertions(+), 7 deletions(-)

(limited to 'archaeological_files')

diff --git a/archaeological_files/ishtar_menu.py b/archaeological_files/ishtar_menu.py
index 8645be2f2..ecb27aa2b 100644
--- a/archaeological_files/ishtar_menu.py
+++ b/archaeological_files/ishtar_menu.py
@@ -86,7 +86,8 @@ MENU_SECTIONS = [
                             _("Search"),
                             model=AdministrativeAct,
                             access_controls=[
-                                "archaeological_operations.change_administrativeact"
+                                "archaeological_operations.view_administrativeact",
+                                "archaeological_operations.view_own_administrativeact",
                             ],
                         ),
                         MenuItem(
@@ -94,7 +95,7 @@ MENU_SECTIONS = [
                             _("Creation"),
                             model=AdministrativeAct,
                             access_controls=[
-                                "archaeological_operations.change_administrativeact"
+                                "archaeological_operations.add_administrativeact"
                             ],
                         ),
                         MenuItem(
@@ -102,7 +103,8 @@ MENU_SECTIONS = [
                             _("Modification"),
                             model=AdministrativeAct,
                             access_controls=[
-                                "archaeological_operations.change_administrativeact"
+                                "archaeological_operations.change_administrativeact",
+                                "archaeological_operations.change_own_administrativeact"
                             ],
                         ),
                         MenuItem(
@@ -111,6 +113,7 @@ MENU_SECTIONS = [
                             model=AdministrativeAct,
                             access_controls=[
                                 "archaeological_operations.delete_administrativeact"
+                                "archaeological_operations.delete_own_administrativeact"
                             ],
                         ),
                     ],
diff --git a/archaeological_files/urls.py b/archaeological_files/urls.py
index d8e473451..42c48a3d7 100644
--- a/archaeological_files/urls.py
+++ b/archaeological_files/urls.py
@@ -37,14 +37,17 @@ urlpatterns = [
     ),
     url(
         r"file_administrativeactfile_search/(?P<step>.+)?$",
-        check_permissions(["archaeological_operations.change_administrativeact"])(
+        check_permissions([
+            "archaeological_operations.view_administrativeact",
+            "archaeological_operations.view_own_administrativeact"])(
             views.file_administrativeactfile_search_wizard
         ),
         name="file_administrativeactfile_search",
     ),
     url(
         r"^file_administrativeactfile/(?P<step>.+)?$",
-        check_permissions(["archaeological_operations.change_administrativeact"])(
+        check_permissions([
+            "archaeological_operations.add_administrativeact"])(
             views.file_administrativeactfile_wizard
         ),
         name="file_administrativeactfile",
@@ -56,14 +59,18 @@ urlpatterns = [
     ),
     url(
         r"file_administrativeactfile_deletion/(?P<step>.+)?$",
-        check_permissions(["archaeological_operations.delete_administrativeact"])(
+        check_permissions([
+            "archaeological_operations.delete_administrativeact",
+            "archaeological_operations.delete_own_administrativeact"])(
             views.file_administrativeactfile_deletion_wizard
         ),
         name="file_administrativeactfile_deletion",
     ),
     url(
         r"file_administrativeactfile_modification/(?P<step>.+)?$",
-        check_permissions(["archaeological_operations.change_administrativeact"])(
+        check_permissions([
+            "archaeological_operations.change_administrativeact",
+            "archaeological_operations.change_own_administrativeact"])(
             views.file_administrativeactfile_modification_wizard
         ),
         name="file_administrativeactfile_modification",
-- 
cgit v1.2.3