From 976ec7ddc556092f7ffbe09b067cc98e6c8d5196 Mon Sep 17 00:00:00 2001 From: tr4ck3ur Date: Fri, 20 Feb 2015 17:18:53 +0100 Subject: Remove old Schedule js file no more used Fix edit event rights --- jm2l/views.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'jm2l/views.py') diff --git a/jm2l/views.py b/jm2l/views.py index 5c1258e..b7b11a3 100644 --- a/jm2l/views.py +++ b/jm2l/views.py @@ -759,7 +759,7 @@ def edit_event(request): if TheEvent is None: raise HTTPNotFound(u"Cette réference n'existe pas") - if not (request.user.uid==1 or request.user in TheEvent.intervenants): + if request.user is None or not (request.user.Staff or request.user in TheEvent.intervenants): return HTTPForbidden(u"Vous n'êtes pas identifié comme étant un participant à cette intervention.") # Compute some field value from selected event if TheEvent.start_time in TheYear[0].AvailableTimeSlots: @@ -1063,7 +1063,7 @@ def notfound(reason, request): @forbidden_view_config() def forbidden(reason, request): - return Response('forbidden') + #return Response('forbidden') request.response.status = 404 return render_to_response('jm2l:templates/Errors/404.mak', { "reason":reason }, request=request) \ No newline at end of file -- cgit v1.2.3-54-g00ecf