From ec6ac443fb1b3a53a465b65edb431e8d7cddc073 Mon Sep 17 00:00:00 2001 From: Lance Edgar Date: Wed, 25 Feb 2026 11:22:49 -0600 Subject: [PATCH] fix: add separate permission for each quick form view --- src/wuttafarm/web/views/quick/__init__.py | 5 +++++ src/wuttafarm/web/views/quick/base.py | 6 +++++- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/src/wuttafarm/web/views/quick/__init__.py b/src/wuttafarm/web/views/quick/__init__.py index 92595e1..8423b0d 100644 --- a/src/wuttafarm/web/views/quick/__init__.py +++ b/src/wuttafarm/web/views/quick/__init__.py @@ -27,4 +27,9 @@ from .base import QuickFormView def includeme(config): + + # perm group + config.add_wutta_permission_group("quick", "Quick Forms", overwrite=False) + + # quick form views config.include("wuttafarm.web.views.quick.eggs") diff --git a/src/wuttafarm/web/views/quick/base.py b/src/wuttafarm/web/views/quick/base.py index 2fb73e4..a40e8e3 100644 --- a/src/wuttafarm/web/views/quick/base.py +++ b/src/wuttafarm/web/views/quick/base.py @@ -151,6 +151,10 @@ class QuickFormView(View): def _defaults(cls, config): route_slug = cls.get_route_slug() url_slug = cls.get_url_slug() + form_title = cls.get_form_title() + config.add_wutta_permission("quick", f"quick.{route_slug}", form_title) config.add_route(f"quick.{route_slug}", f"/quick/{url_slug}") - config.add_view(cls, route_name=f"quick.{route_slug}") + config.add_view( + cls, route_name=f"quick.{route_slug}", permission=f"quick.{route_slug}" + )