Exemple #1
0
    def _check_access(self):
        RHManageEventBase._check_access(self)

        # Check that template belongs to this event or a category that
        # is a parent
        if self.template.owner != self.event and self.template.owner.id not in self.event.category_chain:
            raise Forbidden
Exemple #2
0
    def _check_access(self):
        RHManageEventBase._check_access(self)

        # Check that template belongs to this event or a category that
        # is a parent
        if self.template.owner != self.event and self.template.owner.id not in self.event.category_chain:
            raise Forbidden
Exemple #3
0
    def _check_access(self):
        RHManageEventBase._check_access(self)

        # Check that template belongs to this event or a category that is a parent
        if self.template.owner == self.event:
            return
        valid_category_ids = self.event.category_chain or [
            Category.get_root().id
        ]
        if self.template.owner.id not in valid_category_ids:
            raise Forbidden
Exemple #4
0
 def _check_access(self):
     self.protection_overridden = False
     if hasattr(self, 'definition'):
         # check if user can manage *that* request
         can_manage_request = session.user and self.definition and self.definition.can_be_managed(session.user)
     else:
         # check if user can manage any request
         can_manage_request = session.user and is_request_manager(session.user)
     can_manage_event = self.event.can_manage(session.user)
     self.protection_overridden = can_manage_request and not can_manage_event
     if not can_manage_request and not can_manage_event:
         RHManageEventBase._check_access(self)
Exemple #5
0
 def _check_access(self):
     self.protection_overridden = False
     if hasattr(self, 'definition'):
         # check if user can manage *that* request
         can_manage_request = session.user and self.definition and self.definition.can_be_managed(session.user)
     else:
         # check if user can manage any request
         can_manage_request = session.user and is_request_manager(session.user)
     can_manage_event = self.event.can_manage(session.user)
     self.protection_overridden = can_manage_request and not can_manage_event
     if not can_manage_request and not can_manage_event:
         RHManageEventBase._check_access(self)
Exemple #6
0
 def _check_access(self):
     if not self.session or self.session_management_level == SessionManagementLevel.none:
         RHManageEventBase._check_access(self)
     else:
         if self.session_management_level == SessionManagementLevel.manage:
             func = lambda u: self.session.can_manage(u)
         elif self.session_management_level == SessionManagementLevel.coordinate_with_blocks:
             func = lambda u: self.session.can_manage_blocks(u)
         elif self.session_management_level == SessionManagementLevel.coordinate_with_contribs:
             func = lambda u: self.session.can_manage_contributions(u)
         elif self.session_management_level == SessionManagementLevel.coordinate:
             func = lambda u: self.session.can_manage(u, role='coordinate')
         else:
             raise Exception("Invalid session management level")
         if not func(session.user):
             raise Forbidden
Exemple #7
0
 def _check_access(self):
     if not self.session or self.session_management_level == SessionManagementLevel.none:
         RHManageEventBase._check_access(self)
     else:
         if self.session_management_level == SessionManagementLevel.manage:
             func = lambda u: self.session.can_manage(u)
         elif self.session_management_level == SessionManagementLevel.coordinate_with_blocks:
             func = lambda u: self.session.can_manage_blocks(u)
         elif self.session_management_level == SessionManagementLevel.coordinate_with_contribs:
             func = lambda u: self.session.can_manage_contributions(u)
         elif self.session_management_level == SessionManagementLevel.coordinate:
             func = lambda u: self.session.can_manage(u, permission='coordinate')
         else:
             raise Exception("Invalid session management level")
         if not func(session.user):
             raise Forbidden
Exemple #8
0
 def _check_access(self):
     RHManageEventBase._check_access(self)
     if self.event.type_ != EventType.conference:
         raise NotFound('Only conferences have a menu')
Exemple #9
0
 def _check_access(self):
     RHManageEventBase._check_access(self)
     RHRoomBookingBase._check_access(self)
Exemple #10
0
 def _check_access(self):
     RHManageEventBase._check_access(self)
     if self.event.type_ != EventType.conference:
         raise NotFound('Only conferences have a menu')
Exemple #11
0
 def _check_access(self):
     if not is_chat_admin(session.user):
         RHManageEventBase._check_access(self)
Exemple #12
0
 def _check_access(self):
     RHManageEventBase._check_access(self)
     RHRoomBookingBase._check_access(self)