cst1/kpsul
1
0
Fork 0
forked from DGNum/gestioCOF
Code Pull requests Activity

Correction de permissions

Browse source 
La vue liste des spectacles utilisée par le burô n'était pas protégée
derrière le décorateur `buro_required`.
This commit is contained in:
Martin Pépin 2016-08-27 15:08:36 +02:00
parent 2989a6e186
commit a5fa6950f5
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
bda/urls.py
View file

@ -5,6 +5,7 @@ from __future__ import print_function
from __future__ import unicode_literals from __future__ import unicode_literals
from django.conf.urls import url from django.conf.urls import url
from gestioncof.decorators import buro_required
from bda.views import SpectacleListView from bda.views import SpectacleListView
from bda import views from bda import views
@ -23,7 +24,7 @@ urlpatterns = [
name='bda-etat-places'), name='bda-etat-places'),
url(r'^tirage/(?P<tirage_id>\d+)$', views.tirage), url(r'^tirage/(?P<tirage_id>\d+)$', views.tirage),
url(r'^spectacles/(?P<tirage_id>\d+)$', url(r'^spectacles/(?P<tirage_id>\d+)$',
SpectacleListView.as_view(), buro_required(SpectacleListView.as_view()),
name="bda-liste-spectacles"), name="bda-liste-spectacles"),
url(r'^spectacles/(?P<tirage_id>\d+)/(?P<spectacle_id>\d+)$', url(r'^spectacles/(?P<tirage_id>\d+)/(?P<spectacle_id>\d+)$',
views.spectacle, views.spectacle,