matthias/mayan-edms
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Backport ACL computation improvements

Browse Source 
Signed-off-by: Roberto Rosario <roberto.rosario.gonzalez@gmail.com>
This commit is contained in:
Roberto Rosario
2019-05-04 03:27:30 -04:00
parent d271f1503d
commit 8e731d6280
61 changed files with 701 additions and 609 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
mayan/apps/document_comments/api_views.py
View File

@@ -30,7 +30,7 @@ class APICommentListView(generics.ListCreateAPIView):
)
AccessControlList.objects.check_access(
obj=document, permissions=permission_required,
obj=document, permissions=(permission_required,),
user=self.request.user
)
@@ -85,7 +85,7 @@ class APICommentView(generics.RetrieveDestroyAPIView):
)
AccessControlList.objects.check_access(
obj=document, permissions=permission_required,
obj=document, permissions=(permission_required,),
user=self.request.user
)

6
mayan/apps/document_comments/views.py
View File

@@ -26,7 +26,7 @@ class DocumentCommentCreateView(SingleObjectCreateView):
def dispatch(self, request, *args, **kwargs):
AccessControlList.objects.check_access(
obj=self.get_document(), permissions=permission_comment_create,
obj=self.get_document(), permissions=(permission_comment_create,),
user=request.user
)
@@ -67,7 +67,7 @@ class DocumentCommentDeleteView(SingleObjectDeleteView):
def dispatch(self, request, *args, **kwargs):
AccessControlList.objects.check_access(
obj=self.get_object().document,
permissions=permission_comment_delete, user=request.user
permissions=(permission_comment_delete,), user=request.user
)
return super(
@@ -120,7 +120,7 @@ class DocumentCommentListView(SingleObjectListView):
def get_object_list(self):
AccessControlList.objects.check_access(
obj=self.get_document(), permissions=permission_comment_view,
obj=self.get_document(), permissions=(permission_comment_view,),
user=self.request.user
)