Skip to content

CIRCLE / cloud

Go to a project
Commit b02c9fa7 by Kálmán Viktor
Options

dashboard: permission check for activity view

parent 5a759e1b
Showing with 3 additions and 0 deletions
circle/dashboard/views.py
...@@ -335,6 +335,9 @@ def mass_delete_vm(request, **kwargs): ...@@ -335,6 +335,9 @@ def mass_delete_vm(request, **kwargs):
@require_POST @require_POST
def vm_activity(request, pk): def vm_activity(request, pk):
if not object.has_level(request.user, 'owner'):
raise PermissionDenied()
latest = request.POST.get('latest') latest = request.POST.get('latest')
latest_sub = request.POST.get('latest_sub') latest_sub = request.POST.get('latest_sub')
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or sign in to comment