From: richard <richard@57a73879-2fb5-44c3-a270-3262357dd7e2>
Date: Wed, 11 Sep 2002 01:20:41 +0000 (+0000)
Subject: restrict access to the generic class edit form
X-Git-Url: https://git.tokkee.org/?a=commitdiff_plain;h=ea6a9ce9b8c207b2f074f3a716ac42a55288e76d;p=roundup.git

restrict access to the generic class edit form


git-svn-id: http://svn.roundup-tracker.org/svnroot/roundup/trunk@1131 57a73879-2fb5-44c3-a270-3262357dd7e2
---

diff --git a/roundup/templates/classic/html/_generic.index b/roundup/templates/classic/html/_generic.index
index 951dafd..69d3d99 100644
--- a/roundup/templates/classic/html/_generic.index
+++ b/roundup/templates/classic/html/_generic.index
@@ -1,5 +1,14 @@
 <!-- dollarId: issue.index,v 1.2 2001/07/29 04:07:37 richard Exp dollar-->
+<tal:block tal:define="
+    editok python:request.user.hasPermission('Edit') or
+           context.id == request.user.id;
+    viewok python:request.user.hasPermission('View')">
 
+<span tal:condition="python:not (viewok or editok)">
+You are not allowed to view this page.
+</span>
+
+<tal:block tal:condition="editok">
 <p class="form-help">
  You may edit the contents of the <span tal:replace="request/classname" />
  class using this form. Commas, newlines and double quotes (") must be
@@ -24,4 +33,10 @@
 <input type="hidden" name=":action" value="editCSV">
 <input type="submit" value="Edit Items">
 </form>
+</tal:block>
+
+<tal:block tal:condition="python:viewok and not editok">
+view ok
+</tal:block>
 
+</tal:block>