Projet

Général

Profil

0001-manager-fix-view-permissions-fixes-15614.patch

Benjamin Dauvergne, 24 mars 2017 14:43

Télécharger (3,98 ko)

Voir les différences: 

Subject: [PATCH] manager: fix view permissions (fixes #15614)

View.permissions must be a list.

 src/authentic2/manager/ou_views.py   |  2 +-
 src/authentic2/manager/role_views.py | 12 ++++++------
 src/authentic2/manager/user_views.py |  2 +-
 3 files changed, 8 insertions(+), 8 deletions(-)
src/authentic2/manager/ou_views.py
18 18 

  		




  19
  19
  
    
class OrganizationalUnitAddView(views.BaseAddView):

  		




  20
  20
  
    
    model = get_ou_model()

  		




  21
  
  
    
    permissions = 'a2_rbac.add_organizationalunit'

  		




  
  21
  
    
    permissions = ['a2_rbac.add_organizationalunit']

  		




  22
  22
  
    
    form_class = forms.OUEditForm

  		




  23
  23
  
    

  		




  24
  24
  
    
    def get_success_url(self):

  		












  

    
      src/authentic2/manager/role_views.py
    
  





  237
  237
  
    
    form_class = forms.RolesForm

  		




  238
  238
  
    
    success_url = '..'

  		




  239
  239
  
    
    template_name = 'authentic2/manager/form.html'

  		




  240
  
  
    
    permissions = 'a2_rbac.change_role'

  		




  
  240
  
    
    permissions = ['a2_rbac.change_role']

  		




  241
  241
  
    

  		




  242
  242
  
    
    def dispatch(self, request, *args, **kwargs):

  		




  243
  243
  
    
        self.object = self.get_object()

  		




  ......




  279
  279
  
    
    model = get_role_model()

  		




  280
  280
  
    
    success_url = '../..'

  		




  281
  281
  
    
    template_name = 'authentic2/manager/role_remove_child.html'

  		




  282
  
  
    
    permissions = 'a2_rbac.change_role'

  		




  
  282
  
    
    permissions = ['a2_rbac.change_role']

  		




  283
  283
  
    

  		




  284
  284
  
    
    def dispatch(self, request, *args, **kwargs):

  		




  285
  285
  
    
        self.object = self.get_object()

  		




  ......




  333
  333
  
    
    form_class = forms.RolesForm

  		




  334
  334
  
    
    success_url = '..'

  		




  335
  335
  
    
    template_name = 'authentic2/manager/form.html'

  		




  336
  
  
    
    permissions = 'a2_rbac.change_role'

  		




  
  336
  
    
    permissions = ['a2_rbac.change_role']

  		




  337
  337
  
    

  		




  338
  338
  
    
    def dispatch(self, request, *args, **kwargs):

  		




  339
  339
  
    
        self.object = self.get_object()

  		




  ......




  353
  353
  
    
    model = get_role_model()

  		




  354
  354
  
    
    success_url = '../..'

  		




  355
  355
  
    
    template_name = 'authentic2/manager/role_remove_admin_role.html'

  		




  356
  
  
    
    permissions = 'a2_rbac.change_role'

  		




  
  356
  
    
    permissions = ['a2_rbac.change_role']

  		




  357
  357
  
    

  		




  358
  358
  
    
    def dispatch(self, request, *args, **kwargs):

  		




  359
  359
  
    
        self.object = self.get_object()

  		




  ......




  379
  379
  
    
    form_class = forms.UsersForm

  		




  380
  380
  
    
    success_url = '..'

  		




  381
  381
  
    
    template_name = 'authentic2/manager/form.html'

  		




  382
  
  
    
    permissions = 'a2_rbac.change_role'

  		




  
  382
  
    
    permissions = ['a2_rbac.change_role']

  		




  383
  383
  
    

  		




  384
  384
  
    
    def dispatch(self, request, *args, **kwargs):

  		




  385
  385
  
    
        self.object = self.get_object()

  		




  ......




  399
  399
  
    
    model = get_role_model()

  		




  400
  400
  
    
    success_url = '../..'

  		




  401
  401
  
    
    template_name = 'authentic2/manager/role_remove_admin_user.html'

  		




  402
  
  
    
    permissions = 'a2_rbac.change_role'

  		




  
  402
  
    
    permissions = ['a2_rbac.change_role']

  		




  403
  403
  
    

  		




  404
  404
  
    
    def dispatch(self, request, *args, **kwargs):

  		




  405
  405
  
    
        self.object = self.get_object()

  		












  

    
      src/authentic2/manager/user_views.py
    
  





  33
  33
  
    
    template_name = 'authentic2/manager/users.html'

  		




  34
  34
  
    
    model = get_user_model()

  		




  35
  35
  
    
    table_class = UserTable

  		




  36
  
  
    
    permissions = 'custom_user.view_user'

  		




  
  36
  
    
    permissions = ['custom_user.view_user']

  		




  37
  37
  
    
    search_form_class = UserSearchForm

  		




  38
  38
  
    

  		




  39
  39
  
    
    def is_ou_specified(self):

  		




  40
  
  
    
-