decentral1se/pandora
1
0
Fork 0
forked from 0x2620/pandora
Code Issues Pull requests Projects Releases Wiki Activity

item owner can see all data

Browse source
This commit is contained in:
j 2013-03-30 11:25:41 +00:00
parent b299b4b7e8
commit 896df71942
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
pandora/item/views.py
View file

@ -478,6 +478,8 @@ def get(request):
level = 'guest' level = 'guest'
else: else:
level = request.user.get_profile().get_level() level = request.user.get_profile().get_level()
if request.user == item.user:
return True
return level in settings.CONFIG['capabilities'][capability] \ return level in settings.CONFIG['capabilities'][capability] \
and settings.CONFIG['capabilities'][capability][level] and settings.CONFIG['capabilities'][capability][level]
for k in settings.CONFIG['itemKeys']: for k in settings.CONFIG['itemKeys']: