nofusscomputing/centurion_erp
1
0
Fork 0
Code Issues Wiki Activity

fix(access): Add correct permissions for organization view/update

Browse Source 
!13
This commit is contained in:
Jon Lockwood
2024-05-29 05:33:48 +09:30
parent 98885a32e7
commit cb7987f841
1 changed files with 15 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
app/access/views/organization.py
View File

@ -1,4 +1,6 @@
from django.contrib.auth.mixins import PermissionRequiredMixin, LoginRequiredMixin
from django.contrib.auth import decorators as auth_decorator
from django.contrib.auth.mixins import LoginRequiredMixin
from django.utils.decorators import method_decorator
from django.views import generic
from access.mixin import *
@ -6,7 +8,7 @@ from access.models import *
class IndexView(PermissionRequiredMixin, OrganizationPermission, generic.ListView):
class IndexView(OrganizationPermission, generic.ListView):
permission_required = 'access.view_organization'
template_name = 'access/index.html.j2'
context_object_name = "organization_list"
@ -24,9 +26,12 @@ class IndexView(PermissionRequiredMixin, OrganizationPermission, generic.ListVie
class View(LoginRequiredMixin, OrganizationPermission, generic.UpdateView):
class View(OrganizationPermission, generic.UpdateView):
model = Organization
permission_required = 'access.view_organization'
permission_required = [
'access.view_organization',
'access.change_organization',
]
template_name = "access/organization.html.j2"
fields = ["name", 'id']
@ -52,6 +57,12 @@ class View(LoginRequiredMixin, OrganizationPermission, generic.UpdateView):
return context
@method_decorator(auth_decorator.permission_required("access.change_organization", raise_exception=True))
def post(self, request, *args, **kwargs):
return super().post(request, *args, **kwargs)
class Change(LoginRequiredMixin, OrganizationPermission, generic.DetailView):
pass