mirror of
https://github.com/Nebucatnetzer/network_inventory.git
synced 2024-07-02 06:00:59 +02:00
add backup_view_permission decorator
This commit is contained in:
parent
117fbaf084
commit
1b9f461895
|
@ -1,6 +1,6 @@
|
||||||
from django.http import HttpResponseForbidden
|
from django.http import HttpResponseForbidden
|
||||||
from django.shortcuts import get_object_or_404
|
from django.shortcuts import get_object_or_404
|
||||||
from .models import Computer, Customer, Device, ConnectedDevice, Net
|
from .models import Backup, Computer, Customer, Device, ConnectedDevice, Net
|
||||||
|
|
||||||
|
|
||||||
def computer_view_permission(old_fuction):
|
def computer_view_permission(old_fuction):
|
||||||
|
@ -66,6 +66,13 @@ def net_view_permission(old_fuction):
|
||||||
"You're not allowed to access this device."
|
"You're not allowed to access this device."
|
||||||
)
|
)
|
||||||
return new_function
|
return new_function
|
||||||
|
|
||||||
|
|
||||||
|
def backup_view_permission(old_fuction):
|
||||||
|
def new_function(request, pk, *args, **kwargs):
|
||||||
|
backup = get_object_or_404(Backup, pk=pk)
|
||||||
|
user = request.user
|
||||||
|
if user.has_perm('inventory.view_customer', backup.computer.customer):
|
||||||
return old_fuction(request, pk)
|
return old_fuction(request, pk)
|
||||||
else:
|
else:
|
||||||
return HttpResponseForbidden(
|
return HttpResponseForbidden(
|
||||||
|
|
Loading…
Reference in New Issue
Block a user