nofusscomputing/centurion_erp
1
0
Fork 0
Code Issues Wiki Activity

feat(core): Add permission checking to Tickets form

Browse Source 
ref: #250 #252 #96 #93 #95 #90 #115
This commit is contained in:
Jon Lockwood
2024-08-27 17:18:19 +09:30
parent e63bec83e8
commit 09afd7f165
12 changed files with 336 additions and 71 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/access/mixin.py
View File

@ -248,9 +248,11 @@ class OrganizationMixin():
return True
if self.request.user.has_perms(perms) and len(self.kwargs) == 0 and str(self.request.method).lower() == 'get':
if self.request.user.has_perms(perms) and str(self.request.method).lower() == 'get':
return True
if len(self.kwargs) == 0 or (len(self.kwargs) == 1 and 'ticket_type' in self.kwargs):
return True
for required_permission in self.permission_required: