Restrict statistics access to superusers and staff only

This commit is contained in:
Roberto Rosario
2012-01-08 07:35:40 -04:00
parent 7ea9033c02
commit abd408812f
2 changed files with 12 additions and 9 deletions

View File

@@ -31,7 +31,7 @@ def is_superuser(context):
return context['request'].user.is_staff or context['request'].user.is_superuser
maintenance_menu = {'text': _(u'maintenance'), 'view': 'maintenance_menu', 'famfam': 'wrench', 'icon': 'wrench.png'}
statistics = {'text': _(u'statistics'), 'view': 'statistics', 'famfam': 'table', 'icon': 'blackboard_sum.png'}
statistics = {'text': _(u'statistics'), 'view': 'statistics', 'famfam': 'table', 'icon': 'blackboard_sum.png', 'condition': is_superuser}
diagnostics = {'text': _(u'diagnostics'), 'view': 'diagnostics', 'famfam': 'pill', 'icon': 'pill.png'}
sentry = {'text': _(u'sentry'), 'view': 'sentry', 'famfam': 'bug', 'icon': 'bug.png', 'condition': is_superuser}
admin_site = {'text': _(u'admin site'), 'view': 'admin:index', 'famfam': 'keyboard', 'icon': 'keyboard.png', 'condition': is_superuser}

View File

@@ -46,15 +46,18 @@ def maintenance_menu(request):
def statistics(request):
blocks = []
blocks.append(documents_statistics())
blocks.append(ocr_statistics())
if request.user.is_superuser or request.user.is_staff:
blocks = []
blocks.append(documents_statistics())
blocks.append(ocr_statistics())
return render_to_response('statistics.html', {
'blocks': blocks,
'title': _(u'Statistics')
},
context_instance=RequestContext(request))
return render_to_response('statistics.html', {
'blocks': blocks,
'title': _(u'Statistics')
},
context_instance=RequestContext(request))
else:
raise PermissionDenied
def diagnostics_view(request):