anyone with read_role should be able to view the can_update flag for a project

This commit is contained in:
Wayne Witzel III 2016-06-13 11:25:18 -04:00
parent dc3d1e7e7a
commit 568de86423

View File

@ -195,8 +195,15 @@ class ProjectUpdatePermission(ModelAccessPermission):
'''
Permission check used by ProjectUpdateView to determine who can update projects
'''
def check_get_permission(self, request, view, obj=None):
if request.user.is_superuser:
return True
def has_permission(self, request, view, obj=None):
project = get_object_or_400(view.model, pk=view.kwargs['pk'])
if project and request.user in project.read_role:
return True
def check_post_permission(self, request, view, obj=None):
if request.user.is_superuser:
return True