From 550574b2f883e730b2881597bfb2e49015454821 Mon Sep 17 00:00:00 2001
From: Étienne Loks <etienne.loks@iggdrasil.net>
Date: Wed, 20 Nov 2024 15:47:40 +0100
Subject: 🐛 fix administrative act permissions
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 archaeological_operations/urls.py | 14 ++++++++++----
 1 file changed, 10 insertions(+), 4 deletions(-)

(limited to 'archaeological_operations')

diff --git a/archaeological_operations/urls.py b/archaeological_operations/urls.py
index 6868679cc..13b9d6dff 100644
--- a/archaeological_operations/urls.py
+++ b/archaeological_operations/urls.py
@@ -36,21 +36,25 @@ register_converter(urls_converters.UnderscoreSlug, "uslug")
 urlpatterns = [
     url(
         r"operation_administrativeactop_search/(?P<step>.+)?$",
-        check_permissions(["archaeological_operations.change_administrativeact"])(
+        check_permissions([
+            "archaeological_operations.view_administrativeact",
+            "archaeological_operations.view_own_administrativeact"])(
             views.operation_administrativeactop_search_wizard
         ),
         name="operation_administrativeactop_search",
     ),
     url(
         r"operation_administrativeactop/(?P<step>.+)?$",
-        check_permissions(["archaeological_operations.change_administrativeact"])(
+        check_permissions(["archaeological_operations.add_administrativeact"])(
             views.operation_administrativeactop_wizard
         ),
         name="operation_administrativeactop",
     ),
     url(
         r"operation_administrativeactop_modification/(?P<step>.+)?$",
-        check_permissions(["archaeological_operations.change_administrativeact"])(
+        check_permissions([
+            "archaeological_operations.change_administrativeact",
+            "archaeological_operations.change_own_administrativeact"])(
             views.operation_administrativeactop_modification_wizard
         ),
         name="operation_administrativeactop_modification",
@@ -62,7 +66,9 @@ urlpatterns = [
     ),
     url(
         r"operation_administrativeactop_deletion/(?P<step>.+)?$",
-        check_permissions(["archaeological_operations.change_administrativeact"])(
+        check_permissions([
+            "archaeological_operations.delete_administrativeact",
+            "archaeological_operations.delete_own_administrativeact"])(
             views.operation_administrativeactop_deletion_wizard
         ),
         name="operation_administrativeactop_deletion",
-- 
cgit v1.2.3