Fix permission bug, secretaries should be able to request reviews
- Legacy-Id: 12191
This commit is contained in:
parent
31931ee0e8
commit
2548153894
|
@ -48,7 +48,7 @@ class ReviewTests(TestCase):
|
|||
review_team = review_req.team
|
||||
|
||||
url = urlreverse('ietf.doc.views_review.request_review', kwargs={ "name": doc.name })
|
||||
login_testing_unauthorized(self, "secretary", url)
|
||||
login_testing_unauthorized(self, "reviewsecretary", url)
|
||||
|
||||
# get
|
||||
r = self.client.get(url)
|
||||
|
|
|
@ -27,13 +27,14 @@ def can_request_review_of_doc(user, doc):
|
|||
if not user.is_authenticated():
|
||||
return False
|
||||
|
||||
return is_authorized_in_doc_stream(user, doc)
|
||||
return (is_authorized_in_doc_stream(user, doc)
|
||||
or Role.objects.filter(person__user=user, name="secr", group__in=active_review_teams).exists())
|
||||
|
||||
def can_manage_review_requests_for_team(user, team, allow_non_team_personnel=True):
|
||||
if not user.is_authenticated():
|
||||
return False
|
||||
|
||||
return (Role.objects.filter(name__in=["secr", "delegate"], person__user=user, group=team).exists()
|
||||
return (Role.objects.filter(name="secr", person__user=user, group=team).exists()
|
||||
or (allow_non_team_personnel and has_role(user, "Secretariat")))
|
||||
|
||||
def review_requests_to_list_for_docs(docs):
|
||||
|
|
Loading…
Reference in a new issue