From 360e7560932941dac11eee7bb786d37a81110d86 Mon Sep 17 00:00:00 2001 From: Roberto Rosario Date: Sat, 22 Dec 2018 02:04:46 -0400 Subject: [PATCH] Disable user groups link if superuser or staff Disable the link to view an user's (or current user) group list if the user is a superuser or staff. Signed-off-by: Roberto Rosario --- mayan/apps/user_management/links.py | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/mayan/apps/user_management/links.py b/mayan/apps/user_management/links.py index e2b2b4fe17..449846fccf 100644 --- a/mayan/apps/user_management/links.py +++ b/mayan/apps/user_management/links.py @@ -14,6 +14,12 @@ from .permissions import ( permission_user_edit, permission_user_view ) + +def condition_is_not_superuser(context): + user = context['resolved_object'] + return not user.is_superuser and not user.is_staff + + link_group_create = Link( icon_class=icon_group_create, permissions=(permission_group_create,), text=_('Create new group'), view='user_management:group_create' @@ -52,9 +58,9 @@ link_user_edit = Link( view='user_management:user_edit', ) link_user_groups = Link( - args='object.id', icon_class=icon_group, - permissions=(permission_user_edit,), text=_('Groups'), - view='user_management:user_groups', + args='object.id', condition=condition_is_not_superuser, + icon_class=icon_group, permissions=(permission_user_edit,), + text=_('Groups'), view='user_management:user_groups', ) link_user_list = Link( permissions=(permission_user_view,), text=_('Users'),