Return 404 if they're unauthed to view the application

2025-12-14 06:42:16 +00:00 · 2011-10-09 23:37:43 +01:00
parent f907415e07
commit 2b718b46a7
1 changed files with 2 additions and 0 deletions
--- a/app/hr/views.py
+++ b/app/hr/views.py
@@ -68,6 +68,8 @@ class HrViewApplication(DetailView):
        elif perm == HR_ADMIN:
            context['hrstaff'] = True
            context['audit'] = self.object.audit_set.all()
+        else:
+            raise Http404
        return context