Hopiu/wagtail
1
0
Fork 0
mirror of https://github.com/Hopiu/wagtail.git synced 2026-05-11 00:33:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Require change_group_perm for access to groups views

Browse source
This commit is contained in:
Nick Smith 2014-07-08 10:51:23 +01:00
parent 21f2fe76d0
commit 045644abc1
1 changed files with 4 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
wagtail/wagtailusers/views/groups.py
View file

@ -1,5 +1,4 @@
from django.shortcuts import render, redirect, get_object_or_404
from django.contrib.auth import get_user_model
from django.contrib.auth.models import Group
from django.contrib.auth.decorators import permission_required
from django.core.paginator import Paginator, EmptyPage, PageNotAnInteger
@ -11,17 +10,11 @@ from django.forms.models import inlineformset_factory
from wagtail.wagtailadmin.forms import SearchForm
from wagtail.wagtailusers.forms import GroupForm, BaseGroupPagePermissionFormSet
from wagtail.wagtailcore.models import GroupPagePermission
from wagtail.wagtailcore.compat import AUTH_USER_APP_LABEL, AUTH_USER_MODEL_NAME
User = get_user_model()
# Typically we would check the permission 'auth.change_user' for user
# management actions, but this may vary according to the AUTH_USER_MODEL
# setting
change_user_perm = "{0}.change_{1}".format(AUTH_USER_APP_LABEL, AUTH_USER_MODEL_NAME.lower())
change_group_perm = "auth.change_group"
@permission_required(change_user_perm)
@permission_required(change_group_perm)
@vary_on_headers('X-Requested-With')
def index(request):
q = None
@ -78,7 +71,7 @@ def index(request):
})
@permission_required(change_user_perm)
@permission_required(change_group_perm)
def create(request):
GroupPagePermissionFormSet = inlineformset_factory(
Group,
@ -107,7 +100,7 @@ def create(request):
})
@permission_required(change_user_perm)
@permission_required(change_group_perm)
def edit(request, group_id):
group = get_object_or_404(Group, id=group_id)
GroupPagePermissionFormSet = inlineformset_factory(