nikdoof/test-auth
1
0
Fork 0
mirror of https://github.com/nikdoof/test-auth.git synced 2025-12-15 07:12:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added limitation on viewing all character profiles

Browse Source
This commit is contained in:
Andrew Williams
2011-06-03 00:40:26 +01:00
parent d2406d6614
commit 2caf173e7b
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/eve_api/models/character.py
View File

@@ -84,3 +84,7 @@ class EVEPlayerCharacter(EVEAPIModel):
app_label = 'eve_api' app_label = 'eve_api'
verbose_name = 'Player Character' verbose_name = 'Player Character'
verbose_name_plural = 'Player Characters' verbose_name_plural = 'Player Characters'
permissions = (
("can_view_all_characters", "Can view any character profile"),
)

5
app/eve_api/views.py
View File

@@ -141,6 +141,11 @@ def eveapi_character(request, charid=None):
if charid: if charid:
character = get_object_or_404(EVEPlayerCharacter.objects.select_related('corporation', 'corporation__aliance'), id=charid) character = get_object_or_404(EVEPlayerCharacter.objects.select_related('corporation', 'corporation__aliance'), id=charid)
# Check if the user has permission to see the character profile
if not request.user.has_perm('eve_api.can_view_all_characters') and (not character.account or not request.user == character.account.user):
raise Http404
try: try:
current_training = character.eveplayercharacterskill_set.get(in_training__gt=0) current_training = character.eveplayercharacterskill_set.get(in_training__gt=0)
except: except: