0x2620/pandora
2
1
Fork 1
Code Issues 1.2k Pull requests Releases Wiki Activity

charactes are not people, fix changing password

Browse source
This commit is contained in:
j 2011-10-22 22:12:56 +00:00
commit ea52870db6
8 changed files with 18 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

3
pandora/item/models.py
View file

@ -190,7 +190,8 @@ class Item(models.Model):
def editable(self, user):
if user.is_anonymous():
return False
if user.is_staff or \
if user.get_profile().capability('canEditMetadata') == True or \
user.is_staff or \
self.user == user or \
self.groups.filter(id__in=user.groups.all()).count() > 0:
return True

7
pandora/item/views.py
View file

@ -426,7 +426,7 @@ actions.register(getItem)
@login_required_json
def editItem(request):
def edit(request):
'''
param data {
id: string,
@ -445,11 +445,14 @@ def editItem(request):
if request.user.get_profile().capability('canSeeNotes'):
item.notes = data['notes']
del data['notes']
if 'rightsLevel' in data:
item.level = data['rightsLevel']
del data['rightsLevel']
item.edit(data)
else:
response = json_response(status=403, text='permissino denied')
return render_to_json_response(response)
actions.register(editItem, cache=False)
actions.register(edit, cache=False)
@login_required_json
def remove(request):