Changeset 12166 for main/waeup.ikoba/trunk/src/waeup/ikoba/customers/viewlets.py

Timestamp:

7 Dec 2014, 22:24:03 (10 years ago)

Author:

Henrik Bettermann

Message:

We need to protect also the manage form page of documents. Officers are only allowed to edit documents in state created.

File:

• main/waeup.ikoba/trunk/src/waeup/ikoba/customers/viewlets.py (modified) (2 diffs)

main/waeup.ikoba/trunk/src/waeup/ikoba/customers/viewlets.py

@@ -327 +327 @@
     target = 'manage'
 
+    @property
+    def target_url(self):
+        if not self.context.is_editable_by_manager:
+            return ''
+        return self.view.url(self.view.context, self.target)
+
 
 class DocumentEditActionButton(ManageActionButton):
@@ -338 +344 @@
     @property
     def target_url(self):
-        if not self.context.is_editable:
+        if not self.context.is_editable_by_customer:
             return ''
         return self.view.url(self.view.context, self.target)