From 0244f5cfca0038c12222fade438ca2112c5c521a Mon Sep 17 00:00:00 2001
From: David Taylor <david@taylorhq.com>
Date: Wed, 5 Oct 2016 10:42:49 +0100
Subject: [PATCH] Restored login security to events

---
 RIGS/templates/RIGS/event_detail.html | 8 --------
 RIGS/urls.py                          | 2 +-
 templates/registration/login.html     | 2 +-
 3 files changed, 2 insertions(+), 10 deletions(-)

diff --git a/RIGS/templates/RIGS/event_detail.html b/RIGS/templates/RIGS/event_detail.html
index 4dcaf612..d4b089a9 100644
--- a/RIGS/templates/RIGS/event_detail.html
+++ b/RIGS/templates/RIGS/event_detail.html
@@ -1,14 +1,6 @@
 {% extends request.is_ajax|yesno:"base_ajax.html,base.html" %}
 {% block title %}{% if object.is_rig %}N{{ object.pk|stringformat:"05d" }}{% else %}{{ object.pk }}{% endif %} | {{object.name}}{% endblock %}
 
-{% block extra-head %}
-    
-    <link rel="alternate" type="application/json+oembed"
-      href="{{request.scheme}}://{{request.META.HTTP_HOST}}{{event.get_absolute_url}}oembed"
-      title="RIGS Event Embed" />
-    
-{% endblock %}
-
 {% block content %}
 <div class="row">
     {% if not request.is_ajax %}
diff --git a/RIGS/urls.py b/RIGS/urls.py
index 14b4bd0d..53bba8da 100644
--- a/RIGS/urls.py
+++ b/RIGS/urls.py
@@ -80,7 +80,7 @@ urlpatterns = patterns('',
                            name='activity_feed'),
 
                        url(r'^event/(?P<pk>\d+)/$',
-                           rigboard.EventDetail.as_view(),
+                           permission_required_with_403('RIGS.view_event')(rigboard.EventDetail.as_view()),
                            name='event_detail'),
                        url(r'^event/(?P<pk>\d+)/oembed/$',
                            rigboard.EventOembed.as_view(),
diff --git a/templates/registration/login.html b/templates/registration/login.html
index 2b1f1a72..f9db2e81 100644
--- a/templates/registration/login.html
+++ b/templates/registration/login.html
@@ -5,7 +5,7 @@
 {% block extra-head %}
 	{% if next %}
 	<link rel="alternate" type="application/json+oembed"
-	  href="{{next}}oembed"
+	  href="{{request.scheme}}://{{request.META.HTTP_HOST}}{{next}}oembed"
 	  title="RIGS Event Embed" />
 	{% endif %}
 {% endblock %}