network_inventory/users/decorators.py

18 lines
576 B
Python
Raw Normal View History

2020-01-10 00:01:06 +01:00
from django.http import HttpResponseForbidden
from django.shortcuts import get_object_or_404
from .models import User
def user_view_permission(old_fuction):
def new_function(request, pk, *args, **kwargs):
inventory_user = get_object_or_404(User, pk=pk)
user = request.user
if user.has_perm('customers.view_customer', inventory_user.customer):
return old_fuction(request, pk)
else:
return HttpResponseForbidden(
"You're not allowed to access this device."
)
return new_function