public/coins-demo
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Enforce and test TODO_STAFF_ONLY setting

Browse source
This commit is contained in:
Scot Hacker 2019-01-10 00:39:21 -08:00
parent 6953085285
commit 91b9a099a3
14 changed files with 81 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

4
todo/views/external_add.py
View file

@ -1,6 +1,6 @@
from django.conf import settings
from django.contrib import messages
from django.contrib.auth.decorators import login_required
from django.contrib.auth.decorators import login_required, user_passes_test
from django.contrib.auth.models import User
from django.contrib.sites.models import Site
from django.core.mail import send_mail
@ -10,9 +10,11 @@ from django.template.loader import render_to_string
from todo.forms import AddExternalTaskForm
from todo.models import TaskList
from todo.utils import staff_check
@login_required
@user_passes_test(staff_check)
def external_add(request) -> HttpResponse:
"""Allow authenticated users who don't have access to the rest of the ticket system to file a ticket
in the list specified in settings (e.g. django-todo can be used a ticket filing system for a school, where