Mercurial Mercurial > py_tasks_melange / changeset
summary | shortlog | changelog | graph | tags | bookmarks | branches | files | changeset | raw | zip | gz | bz2 | help
Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Returned ProjectSurvey create to checkIsUser.
authorLennard de Rijk <ljvderijk@gmail.com>
Sat, 04 Jul 2009 17:02:51 +0200
changeset 2537 990a44b6310b
parent 2536 9f1b7aba026f
child 2538 c82fbf7fbad0
Returned ProjectSurvey create to checkIsUser. The access protection is properly done by the form validator.
app/soc/views/models/project_survey.py file | annotate | diff | comparison | revisions 
--- a/app/soc/views/models/project_survey.py	Sat Jul 04 16:44:08 2009 +0200
+++ b/app/soc/views/models/project_survey.py	Sat Jul 04 17:02:51 2009 +0200
@@ -48,7 +48,7 @@
     rights = access.Checker(params)
     rights['any_access'] = ['allow']
     rights['show'] = [('checkIsSurveyReadable', project_survey_logic)]
-    rights['create'] = ['checkIsDeveloper'] # TODO(ljvderijk) proper access check
+    rights['create'] = ['checkIsUser']
     rights['edit'] = [('checkIsSurveyWritable', project_survey_logic)]
     rights['delete'] = ['checkIsDeveloper'] # TODO: fix deletion of Surveys
     rights['list'] = ['checkDocumentList']
py_tasks_melange