From cd8b126b0c39e20e8f7a3976bbe21f1e73b73c50 Mon Sep 17 00:00:00 2001
From: HanseGucker <joniweth@gmx.de>
Date: Tue, 11 Dec 2018 18:14:07 +0100
Subject: [PATCH] Correct permissions [MENU]
---
schoolapps/menu/views.py | 6 +++++-
schoolapps/templates/partials/header.html | 2 +-
2 files changed, 6 insertions(+), 2 deletions(-)
diff --git a/schoolapps/menu/views.py b/schoolapps/menu/views.py
index da49b9205..b56d6ff05 100644
--- a/schoolapps/menu/views.py
+++ b/schoolapps/menu/views.py
@@ -11,7 +11,7 @@ from .forms import MenuUploadForm
@login_required
-@permission_required("can_add_menu")
+@permission_required("menu.add_menu")
def upload(request):
if request.method == 'POST':
form = MenuUploadForm(request.POST, request.FILES)
@@ -26,6 +26,8 @@ def upload(request):
})
+@login_required
+@permission_required("menu.add_menu")
def delete(request, id):
print(id)
Menu.objects.get(id=id).delete()
@@ -33,6 +35,8 @@ def delete(request, id):
return redirect("menu_index_msg", msg="delete_success")
+@login_required
+@permission_required("menu.add_menu")
def index(request, msg=None):
menus = Menu.objects.all().order_by("calendar_week", "year")
return render(request, 'menu/index.html', {"msg": msg, "menus": menus})
diff --git a/schoolapps/templates/partials/header.html b/schoolapps/templates/partials/header.html
index d78c84642..5ecd73baa 100755
--- a/schoolapps/templates/partials/header.html
+++ b/schoolapps/templates/partials/header.html
@@ -122,7 +122,7 @@
<div class="divider"></div>
</li>
{% endif %}
- {% if perms.mealplan.can_add_menu %}
+ {% if perms.menu.add_menu %}
<li>
<a class="subheader grey lighten-3">Speiseplan</a>
</li>
--
GitLab