From 4359d2d3706f5a75ac9526aa7a9a4f794a26eeb4 Mon Sep 17 00:00:00 2001 From: Jaden Diefenbaugh <blakcap@users.noreply.github.com> Date: Thu, 20 Apr 2017 17:00:18 +0200 Subject: [PATCH] add missing helper permission to django --- beat/web/reports/permissions.py | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/beat/web/reports/permissions.py b/beat/web/reports/permissions.py index 9bfd0a1da..9ed36974d 100644 --- a/beat/web/reports/permissions.py +++ b/beat/web/reports/permissions.py @@ -73,6 +73,20 @@ class IsLocked(permissions.BasePermission): #---------------------------------------------------------- +class IsPublished(permissions.BasePermission): + """ + Object level permission that returns true if the + given object status is Report.PUBLISHED + """ + message = 'This report is not published' + + def has_object_permission(self, request, view, obj): + return obj.status == Report.PUBLISHED + + +#---------------------------------------------------------- + + class IsAuthorOrPublished(permissions.BasePermission): """ The logged in user should also be the author or -- GitLab