Commit 1e0904b4 authored by Skia's avatar Skia
Browse files

Merge branch 'sli' into 'master'

Quick fix to hide account number in profile page when not owner user or root

Faut vite cacher les numéros de compte des gens à qui ils n'apartiennent pas, sinon c'est la faille de sécu D:

See merge request !6
parents 5b83aff3 584025ac
Pipeline #229 failed with stage
in 7 seconds
......@@ -57,7 +57,9 @@
<p>
{% if get_subscriber(profile).is_subscribed() %}
{% trans subscription_end=get_subscriber(profile).subscriptions.last().subscription_end %}Subscribed until {{ subscription_end }}{% endtrans %}<br/>
{% if user == profile or user.is_root %}
{% trans %}Account number: {% endtrans %}{{ profile.customer.account_id }}<br/>
{% endif %}
{# Shows tokens bought by the user #}
{{ show_tokens(profile) }}
{# Shows slots took by the user #}
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment