diff options
author | tr4ck3ur <tr4ck3ur@style-python.fr> | 2015-02-20 17:18:53 +0100 |
---|---|---|
committer | tr4ck3ur <tr4ck3ur@style-python.fr> | 2015-02-20 17:18:53 +0100 |
commit | 976ec7ddc556092f7ffbe09b067cc98e6c8d5196 (patch) | |
tree | eb0349bf0ef3ad1aa7c0887fc8d71d047b1ced82 /jm2l/views.py | |
parent | 27af87b97384777ab77a6111081856d1295d9482 (diff) | |
download | jm2l-976ec7ddc556092f7ffbe09b067cc98e6c8d5196.tar.gz jm2l-976ec7ddc556092f7ffbe09b067cc98e6c8d5196.tar.bz2 jm2l-976ec7ddc556092f7ffbe09b067cc98e6c8d5196.tar.xz jm2l-976ec7ddc556092f7ffbe09b067cc98e6c8d5196.zip |
Remove old Schedule js file no more used
Fix edit event rights
Diffstat (limited to 'jm2l/views.py')
-rw-r--r-- | jm2l/views.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/jm2l/views.py b/jm2l/views.py index 5c1258e..b7b11a3 100644 --- a/jm2l/views.py +++ b/jm2l/views.py @@ -759,7 +759,7 @@ def edit_event(request): if TheEvent is None: raise HTTPNotFound(u"Cette réference n'existe pas") - if not (request.user.uid==1 or request.user in TheEvent.intervenants): + if request.user is None or not (request.user.Staff or request.user in TheEvent.intervenants): return HTTPForbidden(u"Vous n'êtes pas identifié comme étant un participant à cette intervention.") # Compute some field value from selected event if TheEvent.start_time in TheYear[0].AvailableTimeSlots: @@ -1063,7 +1063,7 @@ def notfound(reason, request): @forbidden_view_config() def forbidden(reason, request): - return Response('forbidden') + #return Response('forbidden') request.response.status = 404 return render_to_response('jm2l:templates/Errors/404.mak', { "reason":reason }, request=request)
\ No newline at end of file |