altf4arnold/datatracker
1
0
Fork 0
Code Issues Pull requests Actions 3 Packages Projects Releases Wiki Activity

Merged in [10343] from housley@vigilsec.com:

Browse source 
Add check to addcomment for WG/RG chair or secretary;
 - Legacy-Id: 10356
Note: SVN reference [10343] has been migrated to Git commit 93568b2b1f
This commit is contained in:
Henrik Levkowetz 2015-11-01 01:17:25 +00:00
parent 7baf20ca76 93568b2b1f
commit b2dbb1c5ad
1 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
ietf/doc/views_doc.py
View file

@ -905,6 +905,18 @@ def add_comment(request, name):
login = request.user.person
if doc.type_id == "draft" and doc.group != None:
can_add_comment = bool(has_role(request.user, ("Area Director", "Secretariat", "IRTF Chair", "IANA", "RFC Editor")) or (
request.user.is_authenticated() and
Role.objects.filter(name__in=("chair", "secr"),
group__acronym=doc.group.acronym,
person__user=request.user)))
else:
can_add_comment = has_role(request.user, ("Area Director", "Secretariat", "IRTF Chair"))
if not can_add_comment:
# The user is a chair or secretary, but not for this WG or RG
return HttpResponseForbidden("You need to be a chair or secretary of this group to add a comment.")
if request.method == 'POST':
form = AddCommentForm(request.POST)
if form.is_valid():