jlengrand/bugsink
1
0
Fork 0
mirror of https://github.com/jlengrand/bugsink.git synced 2026-03-10 08:01:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix team creation permissions

Browse Source 
settings.TEAM_CREATION was simply unused; an oversight.
This commit is contained in:
Klaas van Schelven
2024-09-10 08:48:46 +02:00
parent 2e70197825
commit 3b0b11d069
2 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
teams/templates/teams/team_list.html
View File

@@ -15,7 +15,7 @@
{# align to bottom #}
<div class="ml-auto"><!-- top, RHS (buttons) -->
{% if perms.teams.add_team %}
{% if can_create %}
<div>
<a class="block font-bold text-slate-800 border-slate-500 pl-4 pr-4 pb-2 pt-2 ml-1 border-2 bg-cyan-200 hover:bg-cyan-400 active:ring rounded-md" href="{% url 'team_new' %}">New Team</a>
</div>

9
teams/views.py
View File

@@ -8,7 +8,6 @@ from django.core.exceptions import PermissionDenied
from django.utils import timezone
from django.urls import reverse
from django.contrib import messages
from django.contrib.auth.decorators import permission_required
from django.contrib.auth import logout
from users.models import EmailVerification
@@ -83,14 +82,20 @@ def team_list(request, ownership_filter=None):
team_list = team_list_2
return render(request, 'teams/team_list.html', {
'can_create':
get_settings().TEAM_CREATION in [CB_ANYBODY, CB_MEMBERS] or
(request.user.is_superuser and get_settings().TEAM_CREATION == CB_ADMINS),
'ownership_filter': ownership_filter,
'team_list': team_list,
})
@atomic_for_request_method
@permission_required("teams.add_team")
def team_new(request):
if not (get_settings().TEAM_CREATION in [CB_ANYBODY, CB_MEMBERS] or
(request.user.is_superuser and get_settings().TEAM_CREATION == CB_ADMINS)):
raise PermissionDenied("You are not allowed to create teams")
if request.method == 'POST':
form = TeamForm(request.POST)