Skip to content
Snippets Groups Projects
Commit 0ac417c5 authored by Tomáš Valenta's avatar Tomáš Valenta
Browse files

fix object based permissions

parent cfa66e1a
No related branches found
No related tags found
1 merge request!5Release
Pipeline #12684 passed
......@@ -260,14 +260,14 @@ class ContractAdmin(
if (
obj is None # Creating confidential data, creator will be request.user
or obj.created_by == request.user
or request.user.has_perm("view_confidential", obj)
or request.user.has_perm("view_confidential")
):
fieldsets[0][1]["fields"].insert(
fieldsets[0][1]["fields"].index("is_public") + 1,
"publishing_rejection_comment",
)
if obj is not None and request.user.has_perm("approve", obj):
if obj is not None and request.user.has_perm("approve"):
fieldsets.insert(
5,
("Schválení", {"fields": ["is_approved"]}),
......@@ -337,7 +337,7 @@ class ContractAdmin(
if (
obj is not None
and obj.is_approved
and not request.user.has_perm("contracts.edit_when_approved", obj)
and not request.user.has_perm("contracts.edit_when_approved")
):
return False
......@@ -347,7 +347,7 @@ class ContractAdmin(
if (
obj is not None
and obj.is_approved
and not request.user.has_perm("contracts.delete_when_approved", obj)
and not request.user.has_perm("contracts.delete_when_approved")
):
return False
......@@ -456,7 +456,7 @@ class SigneeAdmin(OwnPermissionsMixin, MarkdownxGuardedModelAdmin):
if (
obj is None # Creating
or obj.entity_has_public_address
or request.user.has_perm("contracts.view_confidential", obj)
or request.user.has_perm("contracts.view_confidential")
):
entity_type_index = fields.index("entity_type") + 1
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment