Add permissions for the bootstrap app

apps/bootstrap/views.py

@@ -7,11 +7,14 @@ from django.template import RequestContext
 from django.contrib import messages
 from django.core.urlresolvers import reverse
 
+from permissions.models import Permission
+
 from .api import bootstrap_options, nuke_database
+from .permissions import PERMISSION_BOOTSTRAP_EXECUTE, PERMISSION_NUKE_DATABASE 
 
 
 def bootstrap_type_list(request):
-    # TODO: Check for superadmin
+    Permission.objects.check_permissions(request.user, [PERMISSION_BOOTSTRAP_EXECUTE])
     
     context = {
         'object_list': bootstrap_options.values(),
@@ -19,7 +22,6 @@ def bootstrap_type_list(request):
         'hide_link': True,
         'extra_columns': [
             {'name': _(u'description'), 'attribute': 'description'},
-            #{'name': _(u'label'), 'attribute': encapsulate(lambda document: document.checkout_info().expiration_datetime)},
         ],
     }
 
@@ -28,6 +30,7 @@ def bootstrap_type_list(request):
 
 
 def bootstrap_execute(request, bootstrap_name):
+    Permission.objects.check_permissions(request.user, [PERMISSION_BOOTSTRAP_EXECUTE])
     bootstrap = bootstrap_options[bootstrap_name]
     
     post_action_redirect = reverse('bootstrap_type_list')
@@ -60,7 +63,7 @@ def bootstrap_execute(request, bootstrap_name):
 
 
 def erase_database_view(request):
-    # TODO: check for permission
+    Permission.objects.check_permissions(request.user, [PERMISSION_NUKE_DATABASE])
 
     post_action_redirect = None
 
@@ -77,15 +80,14 @@ def erase_database_view(request):
             return HttpResponseRedirect(next)
 
     context = {
-        #'object_name': _(u'bootstrap setup'),
         'delete_view': False,
         'previous': previous,
         'next': next,
         'form_icon': u'radioactivity.png',
-        #'object': bootstrap,
     }
 
     context['title'] = _(u'Are you sure you wish to erase the entire database and document storage?')
+    context['message'] = _(u'All documents, sources, metadata, metadata types, set, tags, indexes and logs will be lost irreversibly!')
 
     return render_to_response('generic_confirm.html', context,
         context_instance=RequestContext(request))