Skip to content

Gutyán Gábor / circlestack

Go to a project
Commit 457687b9 by Csók Tamás
Options

added permission checking

parent 33c0bab9
Showing with 4 additions and 0 deletions
circle/dashboard/views.py
...@@ -1344,10 +1344,14 @@ class ClientCheck(LoginRequiredMixin, TemplateView): ...@@ -1344,10 +1344,14 @@ class ClientCheck(LoginRequiredMixin, TemplateView):
'instance': get_object_or_404( 'instance': get_object_or_404(
Instance, pk=self.request.GET.get('vm')), Instance, pk=self.request.GET.get('vm')),
}) })
if not context['instance'].has_level(self.request.user, 'operator'):
raise PermissionDenied()
return context return context
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
instance = get_object_or_404(Instance, pk=request.POST.get('vm')) instance = get_object_or_404(Instance, pk=request.POST.get('vm'))
if not instance.has_level(request.user, 'operator'):
raise PermissionDenied()
response = HttpResponseRedirect(reverse( response = HttpResponseRedirect(reverse(
'dashboard.views.detail', args=[instance.pk])) 'dashboard.views.detail', args=[instance.pk]))
response.set_cookie('downloaded_client', 'True', 365 * 24 * 60 * 60) response.set_cookie('downloaded_client', 'True', 365 * 24 * 60 * 60)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or sign in to comment