forked from DGNum/gestioCOF
Correction de permissions
La vue liste des spectacles utilisée par le burô n'était pas protégée derrière le décorateur `buro_required`.
This commit is contained in:
parent
2989a6e186
commit
a5fa6950f5
|
@ -5,6 +5,7 @@ from __future__ import print_function
|
||||||
from __future__ import unicode_literals
|
from __future__ import unicode_literals
|
||||||
|
|
||||||
from django.conf.urls import url
|
from django.conf.urls import url
|
||||||
|
from gestioncof.decorators import buro_required
|
||||||
from bda.views import SpectacleListView
|
from bda.views import SpectacleListView
|
||||||
from bda import views
|
from bda import views
|
||||||
|
|
||||||
|
@ -23,7 +24,7 @@ urlpatterns = [
|
||||||
name='bda-etat-places'),
|
name='bda-etat-places'),
|
||||||
url(r'^tirage/(?P<tirage_id>\d+)$', views.tirage),
|
url(r'^tirage/(?P<tirage_id>\d+)$', views.tirage),
|
||||||
url(r'^spectacles/(?P<tirage_id>\d+)$',
|
url(r'^spectacles/(?P<tirage_id>\d+)$',
|
||||||
SpectacleListView.as_view(),
|
buro_required(SpectacleListView.as_view()),
|
||||||
name="bda-liste-spectacles"),
|
name="bda-liste-spectacles"),
|
||||||
url(r'^spectacles/(?P<tirage_id>\d+)/(?P<spectacle_id>\d+)$',
|
url(r'^spectacles/(?P<tirage_id>\d+)/(?P<spectacle_id>\d+)$',
|
||||||
views.spectacle,
|
views.spectacle,
|
||||||
|
|
Loading…
Reference in a new issue