Skip to content
GitLab
Menu
Projects
Groups
Snippets
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
La Quadrature du Net
rpteam
Revue de Press
Commits
039a603f
Verified
Commit
039a603f
authored
Nov 29, 2017
by
Thibaut Broggi
Browse files
Add permission requirement for /user route
parent
220f4be0
Changes
2
Hide whitespace changes
Inline
Side-by-side
apps/core/management/commands/init_groups.py
View file @
039a603f
from
django.core.management.base
import
BaseCommand
from
django.contrib.auth.models
import
User
,
Group
,
Permission
groups
=
[
"jedi"
,
"padawan"
]
groups
=
[
"droid"
,
"jedi"
,
"padawan"
]
permissions
=
{
"droid"
:
[],
"jedi"
:
[
"can_change_status"
,
"can_change_priority"
,
"can_vote"
,
"can_edit"
"can_change_status"
,
"can_change_priority"
,
"can_vote"
,
"can_edit"
,
"can_edit_users"
],
"padawan"
:
[
"can_vote"
,
"add_article"
]
}
...
...
apps/rp/views/users.py
View file @
039a603f
from
django.contrib.auth.models
import
User
from
django.contrib.auth.mixins
import
PermissionRequiredMixin
from
django.views.generic.list
import
ListView
class
UserListView
(
ListView
):
class
UserListView
(
PermissionRequiredMixin
,
ListView
):
model
=
User
paginate_by
=
20
template_name
=
"rp/user_list.html"
template_name
=
'rp/user_list.html'
permission_required
=
'can_edit_users'
def
get_queryset
(
self
):
qs
=
super
().
get_queryset
()
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment