Commit af71e646 authored by Thijs de Jong's avatar Thijs de Jong Committed by Sébastiaan Versteeg

Merge branch 'fix/registration-view-permission' into 'master'

Limit view permission to organisers only

See merge request !1088

(cherry picked from commit 8cf46933)

2da738da Limit view permission to organisers only
parent ec963c17
......@@ -276,6 +276,13 @@ class RegistrationAdmin(DoNextModelAdmin):
raise PermissionDenied
return super().save_model(request, registration, form, change)
def has_view_permission(self, request, registration=None):
"""Only give view permission if the user is an organiser"""
if (registration is not None and
not services.is_organiser(request.member, registration.event)):
return False
return super().has_view_permission(request, registration)
def has_change_permission(self, request, registration=None):
"""Only give change permission if the user is an organiser"""
if (registration is not None and
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment