Commit d7a065c4 authored by Skia's avatar Skia
Browse files

Update SAS rights

parent e3c86c1d
Pipeline #503 passed with stage
in 2 minutes and 29 seconds
......@@ -24,11 +24,13 @@ class Picture(SithFile):
return False
def can_be_edited_by(self, user):
return user.is_in_group(settings.SITH_GROUP_SAS_ADMIN_ID)
file = SithFile.objects.filter(id=self.id).first()
return user.is_in_group(settings.SITH_GROUP_SAS_ADMIN_ID) or user.can_edit(file)
def can_be_viewed_by(self, user):
file = SithFile.objects.filter(id=self.id).first()
return self.can_be_edited_by(user) or (self.is_in_sas and self.is_moderated and
user.was_subscribed())
user.was_subscribed()) or user.can_view(file)
def get_download_url(self):
return reverse('sas:download', kwargs={'picture_id': self.id})
......@@ -87,11 +89,13 @@ class Album(SithFile):
proxy = True
def can_be_edited_by(self, user):
return user.is_in_group(settings.SITH_GROUP_SAS_ADMIN_ID)
file = SithFile.objects.filter(id=self.id).first()
return user.is_in_group(settings.SITH_GROUP_SAS_ADMIN_ID) or user.can_edit(file)
def can_be_viewed_by(self, user):
file = SithFile.objects.filter(id=self.id).first()
return self.can_be_edited_by(user) or (self.is_in_sas and self.is_moderated and
user.was_subscribed())
user.was_subscribed()) or user.can_view(file)
def get_absolute_url(self):
return reverse('sas:album', kwargs={'album_id': self.id})
......
......@@ -42,7 +42,7 @@
{% if user.can_edit(album) %}
<input type="checkbox" name="file_list" value="{{ a.id }}">
{% endif %}
{% if a.as_album.can_be_viewed_by(user) %}
{% if user.can_view(a.as_album) %}
<a href="{{ url("sas:album", album_id=a.id) }}" style="display: inline-block">
<div class="album{% if not a.is_moderated %} not_moderated{% endif %}">
<div>
......@@ -67,7 +67,7 @@
{% if user.can_edit(album) %}
<input type="checkbox" name="file_list" value="{{ p.id }}">
{% endif %}
{% if p.as_picture.can_be_viewed_by(user) %}
{% if user.can_view(p.as_picture) %}
<div class="picture{% if not p.is_moderated %} not_moderated{% endif %}">
<a href="{{ url("sas:picture", picture_id=p.id) }}#pict">
<img src="{{ p.as_picture.get_download_thumb_url() }}" alt="{{ p.get_display_name() }}" />
......
......@@ -62,7 +62,7 @@
{% for r in picture.people.all() %}
<li>
<a href="{{ r.user.get_absolute_url() }}">{{ r.user.get_short_name() }}</a>
{% if user == r.user or user.is_in_group(settings.SITH_GROUP_SAS_ADMIN_ID) %}
{% if user == r.user or user.can_edit(picture) %}
<a href="?remove_user={{ r.user.id }}">{% trans %}Delete{% endtrans %}</a>
{% endif %}
</li>
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment