From 8262a4aadaf2647ddad986bced7b356774a6db84 Mon Sep 17 00:00:00 2001
From: Jonathan Weth <git@jonathanweth.de>
Date: Sun, 30 Aug 2020 15:35:45 +0200
Subject: [PATCH] Add permissions check for DeletePersonalNoteView
---
aleksis/apps/alsijil/views.py | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/aleksis/apps/alsijil/views.py b/aleksis/apps/alsijil/views.py
index b3da8f289..f8ce82118 100644
--- a/aleksis/apps/alsijil/views.py
+++ b/aleksis/apps/alsijil/views.py
@@ -687,9 +687,10 @@ def register_absence(request: HttpRequest) -> HttpResponse:
return render(request, "alsijil/absences/register.html", context)
-class DeletePersonalNoteView(DetailView):
+class DeletePersonalNoteView(PermissionRequiredMixin, DetailView):
model = PersonalNote
template_name = "core/pages/delete.html"
+ permission_required = "alsijil.edit_personalnote"
def post(self, request, *args, **kwargs):
note = self.get_object()
--
GitLab