Complete tests and permission API REST exposure. Note permission objects are found through user and teams, not a permissions

collection.
This commit is contained in:
Michael DeHaan
2013-04-26 18:12:12 -04:00
parent b4932ab5a9
commit b2c4ca6ece
2 changed files with 29 additions and 11 deletions

View File

@@ -279,9 +279,12 @@ class TeamsPermissionsList(BaseSubList):
def _get_queryset(self):
team = Team.objects.get(pk=self.kwargs['pk'])
if not Team.can_user_administrate(self.request.user, team, None):
raise PermissionDenied()
return Permission.objects.filter(team = team)
base = Permission.objects.filter(team = team)
if Team.can_user_administrate(self.request.user, team, None):
return base
elif team.users.filter(pk=self.request.user.pk).count() > 0:
return base
raise PermissionDenied()
class TeamsProjectsList(BaseSubList):