nikdoof/test-auth
1
0
Fork 0
mirror of https://github.com/nikdoof/test-auth.git synced 2025-12-17 11:49:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Check the requester is in the parent group

Browse Source
This commit is contained in:
Andrew Williams
2011-05-19 11:31:31 +01:00
parent dfa86a3250
commit 7648c04fb2
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/groups/views.py
View File

@@ -64,6 +64,9 @@ def create_request(request, groupid):
if request.user in group.user_set.all() or not group.groupinformation.requestable: if request.user in group.user_set.all() or not group.groupinformation.requestable:
return HttpResponseRedirect(reverse('groups.views.group_list')) return HttpResponseRedirect(reverse('groups.views.group_list'))
if group.groupinformation.parent and not group.groupinformation.parent in request.user.groups.all():
return HttpResponseRedirect(reverse('groups.views.group_list'))
if group.requests.filter(status=REQUEST_PENDING,user=request.user).count(): if group.requests.filter(status=REQUEST_PENDING,user=request.user).count():
messages.add_message(request, messages.INFO, "You already have a pending request for %s" % group.name) messages.add_message(request, messages.INFO, "You already have a pending request for %s" % group.name)
return HttpResponseRedirect(reverse('groups.views.group_list')) return HttpResponseRedirect(reverse('groups.views.group_list'))