Ignore:
Timestamp:
31 Jan 2020, 21:50:08 (5 years ago)
Author:
Henrik Bettermann
Message:

Do not allow to submit forms to other companies than payment.r_company.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • main/kofacustom.nigeria/trunk/src/kofacustom/nigeria/etranzact/payoutletbrowser.py

    r15796 r15974  
    106106        if not payoutlet_module_activated(
    107107            self.context.student.current_session, self.context):
    108             return
    109         super(EtranzactEnterPinPageStudent, self).update()
     108            self.flash(_('Forbidden'), type='danger')
     109            self.redirect(self.url(self.context, '@@index'))
     110            return
    110111        # Already now it becomes an Etranzact payment. We set the net amount
    111112        # and add the gateway amount.
     
    134135        if not payoutlet_module_activated(
    135136            self.context.__parent__.__parent__.year, self.context):
    136             return
    137         super(EtranzactEnterPinPageApplicant, self).update()
     137            self.flash(_('Forbidden'), type='danger')
     138            self.redirect(self.url(self.context, '@@index'))
     139            return
    138140        # Already now it becomes an Etranzact payment. We set the net amount
    139141        # and add the gateway amount.
     
    178180        if not payoutlet_module_activated(
    179181            self.context.student.current_session, self.context):
     182            self.flash(_('Forbidden'), type='danger')
     183            self.redirect(self.url(self.context, '@@index'))
    180184            return
    181185        if self.context.p_state == 'paid':
     
    213217        if not payoutlet_module_activated(
    214218            self.context.__parent__.__parent__.year, self.context):
     219            self.flash(_('Forbidden'), type='danger')
     220            self.redirect(self.url(self.context, '@@index'))
    215221            return
    216222        if self.context.p_state == 'paid':
Note: See TracChangeset for help on using the changeset viewer.