示例#1
0
    def _check_access(self):
        RHManageEventBase._check_access(self)

        # Check that template belongs to this event or a category that
        # is a parent
        if self.template.owner != self.event and self.template.owner.id not in self.event.category_chain:
            raise Forbidden
 def _check_access(self):
     self.protection_overridden = False
     if hasattr(self, 'definition'):
         # check if user can manage *that* request
         can_manage_request = session.user and self.definition and self.definition.can_be_managed(session.user)
     else:
         # check if user can manage any request
         can_manage_request = session.user and is_request_manager(session.user)
     can_manage_event = self.event.can_manage(session.user)
     self.protection_overridden = can_manage_request and not can_manage_event
     if not can_manage_request and not can_manage_event:
         RHManageEventBase._check_access(self)
示例#3
0
 def _check_access(self):
     RHManageEventBase._check_access(self)
     RHRoomBookingBase._check_access(self)
示例#4
0
 def _check_access(self):
     RHManageEventBase._check_access(self)
     if self.event.type_ != EventType.conference:
         raise NotFound('Only conferences have a menu')