From f23905b0af048bd6cab6662e9e7baf2f07419793 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=9D=D0=B0=D0=B7=D0=B0=D1=80=20=D0=9A=D0=BE=D1=82=D1=8E?=
 =?UTF-8?q?=D0=BA?= <kotzillla@gmail.com>
Date: Fri, 23 Jan 2015 15:06:24 +0200
Subject: [PATCH] Tag form Bugs

---
 company/edit_forms.py                               | 2 +-
 company/edit_views.py                               | 9 ++++++++-
 company/views.py                                    | 2 +-
 templates/client/includes/company/company_edit.html | 4 ++--
 4 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/company/edit_forms.py b/company/edit_forms.py
index ee64574a..bb88e3f8 100644
--- a/company/edit_forms.py
+++ b/company/edit_forms.py
@@ -117,7 +117,7 @@ class TagForm(BaseForm):
         tags = self.cleaned_data.get('tag')
         if tags:
             res = []
-            for id in tags.split(', '):
+            for id in tags.split(','):
                 try:
                     res.append(int(id))
                 except:
diff --git a/company/edit_views.py b/company/edit_views.py
index 7c6cd1f3..4d68879d 100644
--- a/company/edit_views.py
+++ b/company/edit_views.py
@@ -38,7 +38,14 @@ class LogoView(BaseView):
     form_class = LogoForm
 
     def form_valid(self, form):
-        company = self.request.user.company
+        #company = self.request.user.company#!!!
+
+        slug = self.kwargs.get('slug')
+        if not slug:
+            raise Http404
+        company = Company.objects.get(url=slug)
+        if company.creator_id != self.request.user.id:
+            return HttpResponseForbidden()
         form = self.form_class(self.request.POST, self.request.FILES, instance=company)
         form.save()
         if self.request.is_ajax():
diff --git a/company/views.py b/company/views.py
index f55873d8..07691436 100644
--- a/company/views.py
+++ b/company/views.py
@@ -113,7 +113,7 @@ class MemberDetail(DetailView):
                 'logo_form': CompLogo(instance=company)
             }
             tags = [{'id': str(tag.id), 'text': tag.name } for tag in company.tag.all()]
-            tag_form =  CompTagForm(instance=company)
+            tag_form =  CompTagForm()
             tag_form.fields['tag'].widget.attrs['data-predifined'] = json.dumps(tags)
             tag_form.fields['tag'].widget.attrs['value'] = ''
             forms.update({'tag_form': tag_form})
diff --git a/templates/client/includes/company/company_edit.html b/templates/client/includes/company/company_edit.html
index e349d6a2..e7016aaa 100644
--- a/templates/client/includes/company/company_edit.html
+++ b/templates/client/includes/company/company_edit.html
@@ -30,12 +30,12 @@
 								<div class="ef-body">
 
 									<div class="epfl">
-										<label>{{ avatar_form.avatar.label }}</label>
+										<label>{{ logo_form.logo.label }}</label>
 										<div class="epf-field">
 											<div class="input-file clearfix">
 												<div class="button icon-clip">{% trans 'выберите файл' %}</div>
 												<div class="file-text placehlder">{% trans 'Файл не выбран' %}</div>
-												<div class="if-field-wrap"><input id="id_avatar" type="file" name="avatar" /></div>
+												<div class="if-field-wrap"><input id="id_logo" type="file" name="logo" /></div>
 											</div>
 										</div>
 									</div>