From 6b054c9c6bf8028551c67f7cd3b210552c020ea8 Mon Sep 17 00:00:00 2001
From: Jonathan Weth <git@jonathanweth.de>
Date: Sat, 6 Feb 2021 13:15:50 +0100
Subject: [PATCH] [Group roles] Check permissions in week view
---
aleksis/apps/alsijil/views.py | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/aleksis/apps/alsijil/views.py b/aleksis/apps/alsijil/views.py
index 678eac292..068655496 100644
--- a/aleksis/apps/alsijil/views.py
+++ b/aleksis/apps/alsijil/views.py
@@ -271,7 +271,9 @@ def week_view(
# Group roles
show_group_roles = (
- group and request.user.person.preferences["alsijil__group_roles_in_week_view"]
+ group
+ and request.user.person.preferences["alsijil__group_roles_in_week_view"]
+ and request.user.has_perm("alsijil.view_assigned_grouproles", group)
)
if show_group_roles:
group_roles = GroupRole.objects.with_assignments(wanted_week, [group])
--
GitLab