rattail/tailbone
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

Fix permissions for add/edit/delete notes from people profile view

Browse source
This commit is contained in:
Lance Edgar 2019-10-15 16:12:56 -05:00
parent 3b65b06a3d
commit 9fe585bede
1 changed files with 9 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
tailbone/views/people.py
View file

@ -394,28 +394,28 @@ class PeopleView(MasterView):
if cls.manage_notes_from_profile_view:
# add note
config.add_tailbone_permission(permission_prefix, '{}.profile_add_note'.format(permission_prefix),
"Add new {} note from profile view".format(model_title))
config.add_tailbone_permission('people_profile', 'people_profile.add_note',
"Add new {} Note records".format(model_title))
config.add_route('{}.profile_add_note'.format(route_prefix), '{}/{{{}}}/profile/new-note'.format(url_prefix, model_key),
request_method='POST')
config.add_view(cls, attr='profile_add_note', route_name='{}.profile_add_note'.format(route_prefix),
permission='{}.profile_add_note'.format(permission_prefix))
permission='people_profile.add_note')
# edit note
config.add_tailbone_permission(permission_prefix, '{}.profile_edit_note'.format(permission_prefix),
"Edit existing {} note from profile view".format(model_title))
config.add_tailbone_permission('people_profile', 'people_profile.edit_note',
"Edit {} Note records".format(model_title))
config.add_route('{}.profile_edit_note'.format(route_prefix), '{}/{{{}}}/profile/edit-note'.format(url_prefix, model_key),
request_method='POST')
config.add_view(cls, attr='profile_edit_note', route_name='{}.profile_edit_note'.format(route_prefix),
permission='{}.profile_edit_note'.format(permission_prefix))
permission='people_profile.edit_note')
# delete note
config.add_tailbone_permission(permission_prefix, '{}.profile_delete_note'.format(permission_prefix),
"Delete existing {} note from profile view".format(model_title))
config.add_tailbone_permission('people_profile', 'people_profile.delete_note',
"Delete {} Note records".format(model_title))
config.add_route('{}.profile_delete_note'.format(route_prefix), '{}/{{{}}}/profile/delete-note'.format(url_prefix, model_key),
request_method='POST')
config.add_view(cls, attr='profile_delete_note', route_name='{}.profile_delete_note'.format(route_prefix),
permission='{}.profile_delete_note'.format(permission_prefix))
permission='people_profile.delete_note')
# make user for person
config.add_route('{}.make_user'.format(route_prefix), '{}/make-user'.format(url_prefix),