From 0ca7f35ff249516d3062962b925ef096df0d8365 Mon Sep 17 00:00:00 2001
From: Étienne Loks <etienne.loks@proxience.com>
Date: Mon, 14 Dec 2015 01:03:57 +0100
Subject: Manage own rights in wizards via an appropriate decorator

---
 archaeological_operations/urls.py | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

(limited to 'archaeological_operations/urls.py')

diff --git a/archaeological_operations/urls.py b/archaeological_operations/urls.py
index e0909af8b..cc2c6f9ac 100644
--- a/archaeological_operations/urls.py
+++ b/archaeological_operations/urls.py
@@ -19,6 +19,7 @@
 
 from django.conf.urls.defaults import *
 
+from ishtar_common.wizards import check_rights
 import views
 
 # forms
@@ -51,11 +52,13 @@ urlpatterns = patterns(
     url(r'operation_search/(?P<step>.+)?$',
         views.operation_search_wizard, name='operation_search'),
     url(r'operation_creation/(?P<step>.+)?$',
-        views.operation_creation_wizard, name='operation_creation'),
+        check_rights(['add_operation'])(views.operation_creation_wizard),
+        name='operation_creation'),
     url(r'operation_add/(?P<file_id>\d+)$',
         views.operation_add, name='operation_add'),
     url(r'operation_modification/(?P<step>.+)?$',
-        views.operation_modification_wizard,
+        check_rights(['change_operation', 'change_own_operation'])(
+            views.operation_modification_wizard),
         name='operation_modification'),
     url(r'operation_modify/(?P<pk>.+)/$',
         views.operation_modify, name='operation_modify'),
-- 
cgit v1.2.3