Restrict statistics access to superusers and staff only
This commit is contained in:
@@ -31,7 +31,7 @@ def is_superuser(context):
|
||||
return context['request'].user.is_staff or context['request'].user.is_superuser
|
||||
|
||||
maintenance_menu = {'text': _(u'maintenance'), 'view': 'maintenance_menu', 'famfam': 'wrench', 'icon': 'wrench.png'}
|
||||
statistics = {'text': _(u'statistics'), 'view': 'statistics', 'famfam': 'table', 'icon': 'blackboard_sum.png'}
|
||||
statistics = {'text': _(u'statistics'), 'view': 'statistics', 'famfam': 'table', 'icon': 'blackboard_sum.png', 'condition': is_superuser}
|
||||
diagnostics = {'text': _(u'diagnostics'), 'view': 'diagnostics', 'famfam': 'pill', 'icon': 'pill.png'}
|
||||
sentry = {'text': _(u'sentry'), 'view': 'sentry', 'famfam': 'bug', 'icon': 'bug.png', 'condition': is_superuser}
|
||||
admin_site = {'text': _(u'admin site'), 'view': 'admin:index', 'famfam': 'keyboard', 'icon': 'keyboard.png', 'condition': is_superuser}
|
||||
|
||||
@@ -46,15 +46,18 @@ def maintenance_menu(request):
|
||||
|
||||
|
||||
def statistics(request):
|
||||
blocks = []
|
||||
blocks.append(documents_statistics())
|
||||
blocks.append(ocr_statistics())
|
||||
if request.user.is_superuser or request.user.is_staff:
|
||||
blocks = []
|
||||
blocks.append(documents_statistics())
|
||||
blocks.append(ocr_statistics())
|
||||
|
||||
return render_to_response('statistics.html', {
|
||||
'blocks': blocks,
|
||||
'title': _(u'Statistics')
|
||||
},
|
||||
context_instance=RequestContext(request))
|
||||
return render_to_response('statistics.html', {
|
||||
'blocks': blocks,
|
||||
'title': _(u'Statistics')
|
||||
},
|
||||
context_instance=RequestContext(request))
|
||||
else:
|
||||
raise PermissionDenied
|
||||
|
||||
|
||||
def diagnostics_view(request):
|
||||
|
||||
Reference in New Issue
Block a user