Remove filter options section from user view template and update permission checks in toggle function

This commit is contained in:
Ross
2025-11-03 11:44:14 +00:00
parent e58f070ae2
commit aff8d205ed
2 changed files with 6 additions and 15 deletions
+6 -2
View File
@@ -669,8 +669,12 @@ def toggle_frcr_appropriate(request, pk):
question = get_object_or_404(Question, pk=pk)
# Simple permission: allow staff or users with change permission
if not (request.user.is_staff or request.user.has_perm('sbas.change_question')):
return HttpResponseForbidden("Forbidden")
if question.is_author(request.user):
pass
elif request.user.groups.filter(name="sba_reviewer").exists():
pass
elif not (request.user.is_staff or request.user.has_perm('sbas.change_question')):
return HttpResponse("Forbidden")
# Toggle or set
if request.method == "POST":