Restrict statistics access to superusers and staff only

2012-01-08 07:35:40 -04:00
parent 7ea9033c02
commit abd408812f
2 changed files with 12 additions and 9 deletions
--- a/apps/main/views.py
+++ b/apps/main/views.py
@@ -46,15 +46,18 @@ def maintenance_menu(request):


 def statistics(request):
-    blocks = []
-    blocks.append(documents_statistics())
-    blocks.append(ocr_statistics())
+    if request.user.is_superuser or request.user.is_staff:
+        blocks = []
+        blocks.append(documents_statistics())
+        blocks.append(ocr_statistics())

-    return render_to_response('statistics.html', {
-        'blocks': blocks,
-        'title': _(u'Statistics')
-    },
-    context_instance=RequestContext(request))
+        return render_to_response('statistics.html', {
+            'blocks': blocks,
+            'title': _(u'Statistics')
+        },
+        context_instance=RequestContext(request))
+    else:
+        raise PermissionDenied


 def diagnostics_view(request):