altf4arnold/datatracker
1
0
Fork 0
Code Issues Pull requests Actions 5 Packages Projects Releases Wiki Activity

Merged in [19277] from rjsparks@nostrum.com:

Browse source 
Restrict group creation to the secretariat.
 - Legacy-Id: 19284
Note: SVN reference [19277] has been migrated to Git commit 62a3a4fe41
This commit is contained in:
Robert Sparks 2021-08-05 18:53:15 +00:00
parent 6680096aa0 62a3a4fe41
commit f0511fdeba
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
ietf/group/views.py
View file

@ -897,6 +897,10 @@ def edit(request, group_type=None, acronym=None, action="edit", field=None):
if not (can_manage_group(request.user, group)
or group.has_role(request.user, group.features.groupman_roles)):
permission_denied(request, "You don't have permission to access this view")
else:
if not has_role(request.user, "Secretariat"):
permission_denied(request, "You don't have permission to access this view")
if request.method == 'POST':
form = GroupForm(request.POST, group=group, group_type=group_type, field=field)