matthias/mayan-edms
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Backport ACL computation improvements

Browse Source 
Signed-off-by: Roberto Rosario <roberto.rosario.gonzalez@gmail.com>
This commit is contained in:
Roberto Rosario
2019-05-04 03:27:30 -04:00
parent d271f1503d
commit 8e731d6280
61 changed files with 701 additions and 609 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
mayan/apps/document_indexing/api_views.py
View File

@@ -67,7 +67,7 @@ class APIIndexNodeInstanceDocumentListView(generics.ListAPIView):
)
AccessControlList.objects.check_access(
obj=index_node_instance.index,
permissions=permission_document_indexing_view,
permissions=(permission_document_indexing_view,),
user=self.request.user
)
@@ -113,7 +113,7 @@ class APIDocumentIndexListView(generics.ListAPIView):
def get_queryset(self):
document = get_object_or_404(klass=Document, pk=self.kwargs['pk'])
AccessControlList.objects.check_access(
obj=document, permissions=permission_document_view,
obj=document, permissions=(permission_document_view,),
user=self.request.user
)

6
mayan/apps/document_indexing/views.py
View File

@@ -204,7 +204,7 @@ class TemplateNodeCreateView(SingleObjectCreateView):
def dispatch(self, request, *args, **kwargs):
AccessControlList.objects.check_access(
obj=self.get_parent_node().index,
permissions=permission_document_indexing_edit, user=request.user
permissions=(permission_document_indexing_edit,), user=request.user
)
return super(
@@ -311,7 +311,7 @@ class IndexInstanceNodeView(DocumentListView):
AccessControlList.objects.check_access(
obj=self.index_instance_node.index(),
permissions=permission_document_indexing_instance_view,
permissions=(permission_document_indexing_instance_view,),
user=request.user
)
@@ -378,7 +378,7 @@ class DocumentIndexNodeListView(SingleObjectListView):
def dispatch(self, request, *args, **kwargs):
AccessControlList.objects.check_access(
obj=self.get_document(), permissions=permission_document_view,
obj=self.get_document(), permissions=(permission_document_view,),
user=request.user
)