WIP comment object permission

This commit is contained in:
vabene1111 2019-12-09 11:21:08 +01:00
parent c2a5f2b2e3
commit ea8e708cb7

View File

@ -71,7 +71,8 @@ def internal_recipe_update(request, pk):
ingredients = RecipeIngredients.objects.filter(recipe=recipe_instance)
return render(request, 'forms/edit_internal_recipe.html',
{'form': form, 'ingredients': json.dumps(list(ingredients.values())), 'view_url': reverse('view_recipe', args=[pk])})
{'form': form, 'ingredients': json.dumps(list(ingredients.values())),
'view_url': reverse('view_recipe', args=[pk])})
class SyncUpdate(LoginRequiredMixin, UpdateView):
@ -163,6 +164,12 @@ class CommentUpdate(LoginRequiredMixin, UpdateView):
# TODO add msg box
def get_object(self, *args, **kwargs):
obj = super(CommentUpdate, self).get_object(*args, **kwargs)
if not obj.created_by == self.request.user:
return obj # TODO move to dispatch or build custom exception
return obj
def get_success_url(self):
return reverse('edit_comment', kwargs={'pk': self.object.pk})