def _check_access(self): RHManageEventBase._check_access(self) # Check that template belongs to this event or a category that # is a parent if self.template.owner != self.event and self.template.owner.id not in self.event.category_chain: raise Forbidden
def _check_access(self): self.protection_overridden = False if hasattr(self, 'definition'): # check if user can manage *that* request can_manage_request = session.user and self.definition and self.definition.can_be_managed(session.user) else: # check if user can manage any request can_manage_request = session.user and is_request_manager(session.user) can_manage_event = self.event.can_manage(session.user) self.protection_overridden = can_manage_request and not can_manage_event if not can_manage_request and not can_manage_event: RHManageEventBase._check_access(self)
def _check_access(self): RHManageEventBase._check_access(self) RHRoomBookingBase._check_access(self)
def _check_access(self): RHManageEventBase._check_access(self) if self.event.type_ != EventType.conference: raise NotFound('Only conferences have a menu')