From 87d858a445cb3b99761e07bd764ccef28f4b15c7 Mon Sep 17 00:00:00 2001 From: Ivlev Denis Date: Thu, 15 Feb 2018 17:00:12 +0300 Subject: [PATCH] Fix user perms for course detail page --- apps/course/views.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/apps/course/views.py b/apps/course/views.py index 3bab031a..7431cda4 100644 --- a/apps/course/views.py +++ b/apps/course/views.py @@ -151,7 +151,9 @@ class CourseEditView(TemplateView): template_name = 'course/course_edit.html' def get(self, request, pk=None): - drafts = Course.objects.filter(author=request.user, status=Course.DRAFT) + drafts = Course.objects.filter( + author=request.user, status=Course.DRAFT + ) if pk: self.object = get_object_or_404(Course, pk=pk) elif drafts.exists(): @@ -175,9 +177,7 @@ class CourseView(DetailView): def get(self, request, *args, **kwargs): response = super().get(request, *args, **kwargs) - if (self.object.status != Course.PUBLISHED and - (request.user.role not in [User.AUTHOR_ROLE, User.ADMIN_ROLE] or - self.object.author != request.user)): + if (self.object.status != Course.PUBLISHED and request.user.role not in [User.AUTHOR_ROLE, User.ADMIN_ROLE]) or self.object.author != request.user: raise Http404 return response