forked from enviPath/enviPy
[Feature] Register / Login / Logout View Testing (#126)
Co-authored-by: Tim Lorsbach <tim@lorsba.ch> Reviewed-on: enviPath/enviPy#126
This commit is contained in:
@ -1,9 +1,10 @@
|
||||
# decorators.py
|
||||
from functools import wraps
|
||||
|
||||
from django.shortcuts import render
|
||||
from django.shortcuts import get_object_or_404
|
||||
|
||||
from epdb.logic import PackageManager
|
||||
from epdb.models import Package
|
||||
|
||||
# Map HTTP methods to required permissions
|
||||
DEFAULT_METHOD_PERMISSIONS = {
|
||||
@ -24,6 +25,9 @@ def package_permission_required(method_permissions=None):
|
||||
user = _anonymous_or_real(request)
|
||||
permission_required = method_permissions[request.method]
|
||||
|
||||
# Check if the requested Package exists
|
||||
get_object_or_404(Package, uuid=package_uuid)
|
||||
|
||||
if not PackageManager.has_package_permission(user, package_uuid, permission_required):
|
||||
from epdb.views import error
|
||||
return error(
|
||||
|
||||
Reference in New Issue
Block a user