item owner can see all data

This commit is contained in:
j 2013-03-30 11:25:41 +00:00
parent b299b4b7e8
commit 896df71942

View file

@ -478,6 +478,8 @@ def get(request):
level = 'guest' level = 'guest'
else: else:
level = request.user.get_profile().get_level() level = request.user.get_profile().get_level()
if request.user == item.user:
return True
return level in settings.CONFIG['capabilities'][capability] \ return level in settings.CONFIG['capabilities'][capability] \
and settings.CONFIG['capabilities'][capability][level] and settings.CONFIG['capabilities'][capability][level]
for k in settings.CONFIG['itemKeys']: for k in settings.CONFIG['itemKeys']: