Remove filter options section from user view template and update permission checks in toggle function
This commit is contained in:
+6
-2
@@ -669,8 +669,12 @@ def toggle_frcr_appropriate(request, pk):
|
||||
question = get_object_or_404(Question, pk=pk)
|
||||
|
||||
# Simple permission: allow staff or users with change permission
|
||||
if not (request.user.is_staff or request.user.has_perm('sbas.change_question')):
|
||||
return HttpResponseForbidden("Forbidden")
|
||||
if question.is_author(request.user):
|
||||
pass
|
||||
elif request.user.groups.filter(name="sba_reviewer").exists():
|
||||
pass
|
||||
elif not (request.user.is_staff or request.user.has_perm('sbas.change_question')):
|
||||
return HttpResponse("Forbidden")
|
||||
|
||||
# Toggle or set
|
||||
if request.method == "POST":
|
||||
|
||||
Reference in New Issue
Block a user