Fixed access check in club_member view.
Patch by: Lennard de Rijk
Reviewed by: to-be-reviewed
--- a/app/soc/views/models/club_member.py Fri Mar 27 09:51:25 2009 +0000
+++ b/app/soc/views/models/club_member.py Fri Mar 27 10:34:18 2009 +0000
@@ -26,6 +26,7 @@
from soc.logic import dicts
from soc.logic.models import club as club_logic
+from soc.logic.models import club_member as club_member_logic
from soc.logic.models import club_admin as club_admin_logic
from soc.views.helper import access
from soc.views.helper import decorators
@@ -52,8 +53,8 @@
rights = access.Checker(params)
rights['create'] = ['checkIsDeveloper']
- rights['edit'] = [('checkHasActiveRoleForScope', club_admin_logic.logic),
- ('checkIsMyEntity', club_admin_logic.logic)]
+ rights['edit'] = [('checkHasActiveRoleForScope', club_member_logic.logic),
+ ('checkIsMyEntity', club_member_logic.logic)]
rights['delete'] = ['checkIsDeveloper']
rights['invite'] = [('checkHasActiveRoleForScope', club_admin_logic.logic)]
rights['accept_invite'] = [('checkCanCreateFromRequest','club_member')]