Commit b02c9fa7 by Kálmán Viktor

dashboard: permission check for activity view

parent 5a759e1b
......@@ -335,6 +335,9 @@ def mass_delete_vm(request, **kwargs):
@require_POST
def vm_activity(request, pk):
if not object.has_level(request.user, 'owner'):
raise PermissionDenied()
latest = request.POST.get('latest')
latest_sub = request.POST.get('latest_sub')
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or sign in to comment