From eca16b17afdd90b7a12b5e75489f6027abee7f3a Mon Sep 17 00:00:00 2001
From: Ivlev Denis <di-erz@yandex.ru>
Date: Mon, 7 May 2018 14:49:35 +0300
Subject: [PATCH] Fix lesson perms

---
 apps/course/templates/course/course.html              | 6 +++---
 apps/course/templates/course/course_only_lessons.html | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/apps/course/templates/course/course.html b/apps/course/templates/course/course.html
index 17e9c0d2..5319b366 100644
--- a/apps/course/templates/course/course.html
+++ b/apps/course/templates/course/course.html
@@ -140,7 +140,7 @@
       <div class="course__actions">
         <a href="{% url 'course' course.id %}" class="course__action btn btn_lg{% if not only_lessons %} btn_stroke{% else %} btn_gray{% endif %}">Описание курса</a>
         {% if request.user.is_authenticated %}
-        {% if course.author == request.user and request.user.role == request.user.AUTHOR_ROLE or request.user.role == request.user.ADMIN_ROLE %}
+        {% if course.author == request.user and request.user.role >= request.user.AUTHOR_ROLE %}
         <a
           href="{% url 'course-only-lessons' course.id %}"
           class="course__action btn btn_lg{% if only_lessons %} btn_stroke{% else %} btn_gray{% endif %}"
@@ -223,7 +223,7 @@
       <div class="lessons__title title">Содержание курса</div>
       <div class="lessons__list">
         {% for lesson in course.lessons.all %}
-        {% if request.user.role == request.user.AUTHOR_ROLE or request.user.role == request.user.ADMIN_ROLE %}
+        {% if course.author == request.user and request.user.role >= request.user.AUTHOR_ROLE %}
         <a href="{% url 'lesson' pk=lesson.id %}?next={{ request.get_full_path }}">
         {% else %}
         <div>
@@ -234,7 +234,7 @@
               <div class="lessons__content">{{ lesson.short_description | safe }}</div>
             </div>
           </div>
-        {% if request.user.role == request.user.AUTHOR_ROLE or request.user.role == request.user.ADMIN_ROLE %}
+        {% if course.author == request.user and request.user.role >= request.user.AUTHOR_ROLE %}
         </a>
         {% else %}
         </div>
diff --git a/apps/course/templates/course/course_only_lessons.html b/apps/course/templates/course/course_only_lessons.html
index cfe29b49..1a311d65 100644
--- a/apps/course/templates/course/course_only_lessons.html
+++ b/apps/course/templates/course/course_only_lessons.html
@@ -137,7 +137,7 @@
       </div>
       <div class="course__actions">
           <a href="{% url 'course' course.id %}" class="course__action btn btn_lg{% if not only_lessons %} btn_stroke{% else %} btn_gray{% endif %}">Описание курса</a>
-          {% if request.user.role == request.user.AUTHOR_ROLE or request.user.role == request.user.ADMIN_ROLE %}
+          {% if course.author == request.user and request.user.role >= request.user.AUTHOR_ROLE %}
           <a
             href="{% url 'course-only-lessons' course.id %}"
             class="course__action btn btn_lg{% if only_lessons %} btn_stroke{% else %} btn_gray{% endif %}"
@@ -166,7 +166,7 @@
       <div class="lessons__title title">Содержание курса</div>
       <div class="lessons__list">
         {% for lesson in course.lessons.all %}
-        <a href="{% if request.user.role == request.user.AUTHOR_ROLE or request.user.role == request.user.ADMIN_ROLE %}{% url 'lesson' pk=lesson.id %}{% else %}#{% endif %}">
+        <a href="{% if course.author == request.user and request.user.role >= request.user.AUTHOR_ROLE %}{% url 'lesson' pk=lesson.id %}{% else %}#{% endif %}">
           <div class="lessons__item">
             <div class="lessons__subtitle subtitle">{{ lesson.title }}</div>
             <div class="lessons__row">