changeset permissions

This commit is contained in:
Laura Klünder 2017-06-29 17:15:11 +02:00
parent ef5f4c0704
commit 0ea8ca9920
3 changed files with 14 additions and 10 deletions

View file

@ -18,11 +18,10 @@ from c3nav.mapdata.models.locations import LocationRedirect, LocationSlug
@sidebar_view
def changeset_detail(request, pk):
can_edit = True
changeset = request.changeset
if str(pk) != str(request.changeset.pk):
can_edit = False
changeset = get_object_or_404(ChangeSet.qs_for_request(request), pk=pk)
can_edit = changeset.can_edit(request)
if request.method == 'POST' and can_edit:
restore = request.POST.get('restore')
@ -228,14 +227,11 @@ def changeset_detail(request, pk):
@sidebar_view
def changeset_edit(request, pk):
can_edit = True
changeset = request.changeset
if str(pk) != str(request.changeset.pk):
can_edit = False
changeset = get_object_or_404(ChangeSet.qs_for_request(request), pk=pk)
if not can_edit:
if not changeset.can_edit(request):
raise PermissionDenied
if request.method == 'POST':