From 9fe585bedefb907eec3ce2d1aaacbbe313e18b15 Mon Sep 17 00:00:00 2001 From: Lance Edgar Date: Tue, 15 Oct 2019 16:12:56 -0500 Subject: [PATCH] Fix permissions for add/edit/delete notes from people profile view --- tailbone/views/people.py | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/tailbone/views/people.py b/tailbone/views/people.py index dbd3ad26..e3e1c8e8 100644 --- a/tailbone/views/people.py +++ b/tailbone/views/people.py @@ -394,28 +394,28 @@ class PeopleView(MasterView): if cls.manage_notes_from_profile_view: # add note - config.add_tailbone_permission(permission_prefix, '{}.profile_add_note'.format(permission_prefix), - "Add new {} note from profile view".format(model_title)) + config.add_tailbone_permission('people_profile', 'people_profile.add_note', + "Add new {} Note records".format(model_title)) config.add_route('{}.profile_add_note'.format(route_prefix), '{}/{{{}}}/profile/new-note'.format(url_prefix, model_key), request_method='POST') config.add_view(cls, attr='profile_add_note', route_name='{}.profile_add_note'.format(route_prefix), - permission='{}.profile_add_note'.format(permission_prefix)) + permission='people_profile.add_note') # edit note - config.add_tailbone_permission(permission_prefix, '{}.profile_edit_note'.format(permission_prefix), - "Edit existing {} note from profile view".format(model_title)) + config.add_tailbone_permission('people_profile', 'people_profile.edit_note', + "Edit {} Note records".format(model_title)) config.add_route('{}.profile_edit_note'.format(route_prefix), '{}/{{{}}}/profile/edit-note'.format(url_prefix, model_key), request_method='POST') config.add_view(cls, attr='profile_edit_note', route_name='{}.profile_edit_note'.format(route_prefix), - permission='{}.profile_edit_note'.format(permission_prefix)) + permission='people_profile.edit_note') # delete note - config.add_tailbone_permission(permission_prefix, '{}.profile_delete_note'.format(permission_prefix), - "Delete existing {} note from profile view".format(model_title)) + config.add_tailbone_permission('people_profile', 'people_profile.delete_note', + "Delete {} Note records".format(model_title)) config.add_route('{}.profile_delete_note'.format(route_prefix), '{}/{{{}}}/profile/delete-note'.format(url_prefix, model_key), request_method='POST') config.add_view(cls, attr='profile_delete_note', route_name='{}.profile_delete_note'.format(route_prefix), - permission='{}.profile_delete_note'.format(permission_prefix)) + permission='people_profile.delete_note') # make user for person config.add_route('{}.make_user'.format(route_prefix), '{}/make-user'.format(url_prefix),