Verified Commit 2da738da authored by Sébastiaan Versteeg's avatar Sébastiaan Versteeg
Browse files

Limit view permission to organisers only

parent 350048ea
......@@ -276,6 +276,13 @@ class RegistrationAdmin(DoNextModelAdmin):
raise PermissionDenied
return super().save_model(request, registration, form, change)
def has_view_permission(self, request, registration=None):
"""Only give view permission if the user is an organiser"""
if (registration is not None and
not services.is_organiser(request.member, registration.event)):
return False
return super().has_view_permission(request, registration)
def has_change_permission(self, request, registration=None):
"""Only give change permission if the user is an organiser"""
if (registration is not None and
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment