matthias/mayan-edms
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add cascade permission checks for links. Avoid allowing users to reach a empty views because they don't access to any of the view's objects. Apply link permission cascade checks to the message of the day, indexing and parsing, setup link.

Browse Source 
Signed-off-by: Roberto Rosario <roberto.rosario.gonzalez@gmail.com>
This commit is contained in:
Roberto Rosario
2018-08-22 00:14:21 -04:00
parent 8e39016f12
commit bf3723ae24
6 changed files with 71 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
mayan/apps/document_parsing/links.py
View File

@@ -2,7 +2,7 @@ from __future__ import unicode_literals
from django.utils.translation import ugettext_lazy as _
from navigation import Link
from navigation import Link, get_cascade_condition
from .icons import (
icon_document_content, icon_document_parsing_errors_list,
@@ -44,7 +44,11 @@ link_document_type_parsing_settings = Link(
view='document_parsing:document_type_parsing_settings',
)
link_document_type_submit = Link(
icon_class=icon_document_type_submit, text=_('Parse documents per type'),
condition=get_cascade_condition(
app_label='documents', model_name='DocumentType',
object_permission=permission_document_type_parsing_setup
), icon_class=icon_document_type_submit,
text=_('Parse documents per type'),
view='document_parsing:document_type_submit'
)
link_error_list = Link(