Beispiel #1
0
 def _skip_admin_check(self):
     # GET on this endpoint does not expose anything sensitive, so
     # we allow any room manager to use it if they can edit rooms
     return request.method == 'GET' and rb_settings.get(
         'managers_edit_rooms') and has_managed_rooms(session.user)
Beispiel #2
0
 def has_managed_rooms(self, user):
     from indico.modules.rb.operations.rooms import has_managed_rooms
     return has_managed_rooms(user)
Beispiel #3
0
 def has_managed_rooms(self, user):
     from indico.modules.rb.operations.rooms import has_managed_rooms
     return has_managed_rooms(user)