From d7f483c6f69c48461051ca318f812e3c35a610ca Mon Sep 17 00:00:00 2001 From: Roberto Rosario Date: Wed, 27 Apr 2011 08:03:51 -0400 Subject: [PATCH] Changed the previewing and deleting staging files views to required DOCUMENT_CREATE permission --- apps/documents/views.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/apps/documents/views.py b/apps/documents/views.py index 40843ce2f5..b846688240 100644 --- a/apps/documents/views.py +++ b/apps/documents/views.py @@ -590,7 +590,8 @@ def document_download(request, document_id): def staging_file_preview(request, staging_file_id): - #TODO: Need permission + check_permissions(request.user, 'documents', [PERMISSION_DOCUMENT_CREATE]) + try: output_file, errors = StagingFile.get(staging_file_id).preview() if errors and (request.user.is_staff or request.user.is_superuser): @@ -615,7 +616,8 @@ def staging_file_preview(request, staging_file_id): def staging_file_delete(request, staging_file_id): - #TODO: Need permission + check_permissions(request.user, 'documents', [PERMISSION_DOCUMENT_CREATE]) + staging_file = StagingFile.get(staging_file_id) next = request.POST.get('next', request.GET.get('next', request.META.get('HTTP_REFERER', None))) previous = request.POST.get('previous', request.GET.get('previous', request.META.get('HTTP_REFERER', None)))