Skip to content
Snippets Groups Projects
Commit 0ac417c5 authored by Tomáš Valenta's avatar Tomáš Valenta
Browse files

fix object based permissions

parent cfa66e1a
No related branches found
No related tags found
1 merge request!5Release
Pipeline #12684 passed
...@@ -260,14 +260,14 @@ class ContractAdmin( ...@@ -260,14 +260,14 @@ class ContractAdmin(
if ( if (
obj is None # Creating confidential data, creator will be request.user obj is None # Creating confidential data, creator will be request.user
or obj.created_by == request.user or obj.created_by == request.user
or request.user.has_perm("view_confidential", obj) or request.user.has_perm("view_confidential")
): ):
fieldsets[0][1]["fields"].insert( fieldsets[0][1]["fields"].insert(
fieldsets[0][1]["fields"].index("is_public") + 1, fieldsets[0][1]["fields"].index("is_public") + 1,
"publishing_rejection_comment", "publishing_rejection_comment",
) )
if obj is not None and request.user.has_perm("approve", obj): if obj is not None and request.user.has_perm("approve"):
fieldsets.insert( fieldsets.insert(
5, 5,
("Schválení", {"fields": ["is_approved"]}), ("Schválení", {"fields": ["is_approved"]}),
...@@ -337,7 +337,7 @@ class ContractAdmin( ...@@ -337,7 +337,7 @@ class ContractAdmin(
if ( if (
obj is not None obj is not None
and obj.is_approved and obj.is_approved
and not request.user.has_perm("contracts.edit_when_approved", obj) and not request.user.has_perm("contracts.edit_when_approved")
): ):
return False return False
...@@ -347,7 +347,7 @@ class ContractAdmin( ...@@ -347,7 +347,7 @@ class ContractAdmin(
if ( if (
obj is not None obj is not None
and obj.is_approved and obj.is_approved
and not request.user.has_perm("contracts.delete_when_approved", obj) and not request.user.has_perm("contracts.delete_when_approved")
): ):
return False return False
...@@ -456,7 +456,7 @@ class SigneeAdmin(OwnPermissionsMixin, MarkdownxGuardedModelAdmin): ...@@ -456,7 +456,7 @@ class SigneeAdmin(OwnPermissionsMixin, MarkdownxGuardedModelAdmin):
if ( if (
obj is None # Creating obj is None # Creating
or obj.entity_has_public_address or obj.entity_has_public_address
or request.user.has_perm("contracts.view_confidential", obj) or request.user.has_perm("contracts.view_confidential")
): ):
entity_type_index = fields.index("entity_type") + 1 entity_type_index = fields.index("entity_type") + 1
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment