WIP comment object permission
This commit is contained in:
@ -71,7 +71,8 @@ def internal_recipe_update(request, pk):
|
|||||||
ingredients = RecipeIngredients.objects.filter(recipe=recipe_instance)
|
ingredients = RecipeIngredients.objects.filter(recipe=recipe_instance)
|
||||||
|
|
||||||
return render(request, 'forms/edit_internal_recipe.html',
|
return render(request, 'forms/edit_internal_recipe.html',
|
||||||
{'form': form, 'ingredients': json.dumps(list(ingredients.values())), 'view_url': reverse('view_recipe', args=[pk])})
|
{'form': form, 'ingredients': json.dumps(list(ingredients.values())),
|
||||||
|
'view_url': reverse('view_recipe', args=[pk])})
|
||||||
|
|
||||||
|
|
||||||
class SyncUpdate(LoginRequiredMixin, UpdateView):
|
class SyncUpdate(LoginRequiredMixin, UpdateView):
|
||||||
@ -163,6 +164,12 @@ class CommentUpdate(LoginRequiredMixin, UpdateView):
|
|||||||
|
|
||||||
# TODO add msg box
|
# TODO add msg box
|
||||||
|
|
||||||
|
def get_object(self, *args, **kwargs):
|
||||||
|
obj = super(CommentUpdate, self).get_object(*args, **kwargs)
|
||||||
|
if not obj.created_by == self.request.user:
|
||||||
|
return obj # TODO move to dispatch or build custom exception
|
||||||
|
return obj
|
||||||
|
|
||||||
def get_success_url(self):
|
def get_success_url(self):
|
||||||
return reverse('edit_comment', kwargs={'pk': self.object.pk})
|
return reverse('edit_comment', kwargs={'pk': self.object.pk})
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user