Skip to content
Snippets Groups Projects
Verified Commit 0319cbcf authored by Jonathan Weth's avatar Jonathan Weth :keyboard:
Browse files

Fix register_absence rules (allow only primary group owners to register absences)

parent a5429af4
No related branches found
No related tags found
1 merge request!49Resolve "Add rules and permissions"
Pipeline #3523 passed
......@@ -150,7 +150,7 @@ class RegisterAbsenceForm(forms.Form):
self.request.user, "core.register_absence_person", Person
)
.union(
Person.objects.filter(member_of__owners=self.request.user.person)
Person.objects.filter(primary_group__owners=self.request.user.person)
)
.union(
Person.objects.filter(
......
......@@ -52,7 +52,6 @@ edit_lesson_personal_note_predicate = has_person & (
has_global_perm("alsijil.change_personalnote")
| has_lesson_group_object_perm("core.edit_personalnote_group")
| is_lesson_teacher
| is_lesson_parent_group_owner
)
add_perm("alsijil.edit_lesson_personalnote", edit_lesson_personal_note_predicate)
......@@ -127,7 +126,7 @@ register_absence_predicate = has_person & (
has_global_perm("alsijil.register_absence")
| has_person_group_object_perm("core.register_absence_group")
| has_object_perm("core.register_absence_person")
| is_person_group_owner
| is_person_primary_group_owner
)
add_perm("alsijil.register_absence", register_absence_predicate)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment