Check the requester is in the parent group

This commit is contained in:
2011-05-19 11:31:31 +01:00
parent dfa86a3250
commit 7648c04fb2

View File

@@ -64,6 +64,9 @@ def create_request(request, groupid):
if request.user in group.user_set.all() or not group.groupinformation.requestable:
return HttpResponseRedirect(reverse('groups.views.group_list'))
if group.groupinformation.parent and not group.groupinformation.parent in request.user.groups.all():
return HttpResponseRedirect(reverse('groups.views.group_list'))
if group.requests.filter(status=REQUEST_PENDING,user=request.user).count():
messages.add_message(request, messages.INFO, "You already have a pending request for %s" % group.name)
return HttpResponseRedirect(reverse('groups.views.group_list'))