~michael.nelson/open-goal-tracker/trunk

« back to all changes in this revision

Viewing changes to src/usergoals/userproxies/decorators.py

Committer: Michael Nelson
Date: 2011-02-21 07:22:03 UTC
mfrom: (67.1.5 interaction-tweaks)
Revision ID: michael.nelson@canonical.com-20110221072203-jm03mh546w96odns

Merged lp:~michael.nelson/learning-tools/interaction-tweaks.

files added:
src/usergoals/templates/usergoals/overview_for_user.html

src/usergoals/usergoalagreements/templates/usergoalagreements/usergoalagreement_list_for_helper.html

src/usergoals/userproxies/decorators.py

files modified:
TODO.txt

dev_project/urls.py

media-root-dev/js/behaviour-sheet.js

src/usergoals/models.py

src/usergoals/signals.py

src/usergoals/templates/usergoals/base.html

src/usergoals/templates/usergoals/reusable/goal_form.html

src/usergoals/templates/usergoals/usergoal_detail.html

src/usergoals/templates/usergoals/usergoal_list.html

src/usergoals/tests/test_models.py

src/usergoals/tests/test_signals.py

src/usergoals/tests/test_views.py

src/usergoals/usergoalagreements/admin.py

src/usergoals/usergoalagreements/models.py

src/usergoals/usergoalagreements/urls.py

src/usergoals/usergoalagreements/views.py

src/usergoals/usergoalsteps/forms.py

src/usergoals/usergoalsteps/tests/test_views.py

src/usergoals/usergoalsteps/views.py

src/usergoals/userproxies/models.py

src/usergoals/views.py

Show diffs side-by-side

added added

removed removed

src/usergoals/userproxies/decorators.py

from functools import wraps

from django.http import HttpResponseNotAllowed

from django.utils.decorators import available_attrs

def require_owner_or_proxy(view_func):

def _wrapped_view(request, *args, **kwargs):

# If the request user matches the url username then don't

# bother hitting the database.

if request.user.username == kwargs.get('username', None):

return view_func(request, *args, **kwargs)

# If the request user is a proxy for the url user, then

# we allow them too.

if request.user.proxy_for.filter(

user__username=kwargs.get('username', None)).exists():

return view_func(request, *args, **kwargs)

return HttpResponseNotAllowed("Only the owner can access")

return wraps(view_func, assigned=available_attrs(view_func))(_wrapped_view)

Older »