From 8d7c3a4b006ea6bb4ae496e5ec4747cf1e001b18 Mon Sep 17 00:00:00 2001
From: HanseGucker <joniweth@gmx.de>
Date: Tue, 11 Dec 2018 18:05:41 +0100
Subject: [PATCH] Bug fixing

---
 biscuit/apps/mensa/views.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/biscuit/apps/mensa/views.py b/biscuit/apps/mensa/views.py
index 2b684f0..da49b92 100644
--- a/biscuit/apps/mensa/views.py
+++ b/biscuit/apps/mensa/views.py
@@ -1,6 +1,7 @@
 import datetime
 import os
 
+from django.contrib.auth.decorators import login_required, permission_required
 from django.http import FileResponse
 from django.shortcuts import render, redirect
 from django.utils import timezone
@@ -9,6 +10,8 @@ from menu.models import Menu
 from .forms import MenuUploadForm
 
 
+@login_required
+@permission_required("can_add_menu")
 def upload(request):
     if request.method == 'POST':
         form = MenuUploadForm(request.POST, request.FILES)
-- 
GitLab