From 2c334196d5e300019668553c09d4eae7bfd8c975 Mon Sep 17 00:00:00 2001
From: FreneticScribbler <aj@aronajones.com>
Date: Wed, 4 Dec 2019 23:59:39 +0000
Subject: [PATCH] CHANGE: Restrict viewing asset DB to keyholders.

This is in line with what it was when it was on the Shared Drive.
---
 RIGS/templates/RIGS/index.html | 10 +++++-----
 assets/urls.py                 |  6 +++---
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/RIGS/templates/RIGS/index.html b/RIGS/templates/RIGS/index.html
index 826839e6..bc1cc659 100644
--- a/RIGS/templates/RIGS/index.html
+++ b/RIGS/templates/RIGS/index.html
@@ -11,7 +11,7 @@
     </div>
     <div class="row">
     <div class="col-sm-{% if perms.RIGS.view_event %}6{% else %}12{% endif %}">
-        
+
         <div class="panel panel-default">
             <div class="panel-heading">
                  <h4 class="list-group-item-heading">Quick Links</h4>
@@ -20,7 +20,7 @@
                     <a class="list-group-item" href="{% url 'rigboard' %}"><span class="glyphicon glyphicon-list"></span> Rigboard</a>
                     <a class="list-group-item" href="{% url 'web_calendar' %}"><span class="glyphicon glyphicon-calendar"></span> Calendar</a>
                     {% if perms.RIGS.add_event %}<a class="list-group-item" href="{% url 'event_create' %}"><span class="glyphicon glyphicon-plus"></span> New Event</a>{% endif %}
-                    <a class="list-group-item" href="{% url 'asset_index' %}"><span class="glyphicon glyphicon-tag"></span> Asset Database </a>
+                    {% if perms.assets.view_asset %}<a class="list-group-item" href="{% url 'asset_index' %}"><span class="glyphicon glyphicon-tag"></span> Asset Database</a>{% endif %}
 
                     <div class="list-group-item default"></div>
 
@@ -29,7 +29,7 @@
                     <a class="list-group-item" href="http://members.nottinghamtec.co.uk/wiki/images/2/22/Event_Risk_Assesment.pdf" target="_blank"><span class="glyphicon glyphicon-link"></span> Pre-Event Risk Assessment</a>
                     <a class="list-group-item" href="//members.nottinghamtec.co.uk/price" target="_blank"><span class="glyphicon glyphicon-link"></span> Price List</a>
                     <a class="list-group-item" href="https://goo.gl/forms/jdPWov8PCNPoXtbn2" target="_blank"><span class="glyphicon glyphicon-link"></span> Subhire Insurance Form</a>
-                
+
             </div>
         </div>
 
@@ -73,8 +73,8 @@
     </div>
     {% if perms.RIGS.view_event %}
     <div class="col-sm-6" >
-        {% include 'RIGS/activity_feed.html' %}    
-        
+        {% include 'RIGS/activity_feed.html' %}
+
     </div>
     {% endif %}
 </div>
diff --git a/assets/urls.py b/assets/urls.py
index fa5facd0..1c03a1d9 100644
--- a/assets/urls.py
+++ b/assets/urls.py
@@ -4,9 +4,9 @@ from assets import views
 from PyRIGS.decorators import permission_required_with_403
 
 urlpatterns = [
-    path('', views.AssetList.as_view(), name='asset_index'),
-    path('asset/list/', views.AssetList.as_view(), name='asset_list'),
-    path('asset/id/<str:pk>/', views.AssetDetail.as_view(), name='asset_detail'),
+    path('', permission_required_with_403('assets.view_asset')(views.AssetList.as_view()), name='asset_index'),
+    path('asset/list/', permission_required_with_403('assets.view_asset')(views.AssetList.as_view()), name='asset_list'),
+    path('asset/id/<str:pk>/', permission_required_with_403('assets.view_asset')(views.AssetDetail.as_view()), name='asset_detail'),
     path('asset/create/', permission_required_with_403('assets.create_asset')(views.AssetCreate.as_view()), name='asset_create'),
     path('asset/id/<str:pk>/edit/', permission_required_with_403('assets.change_asset')(views.AssetEdit.as_view()), name='asset_update'),
     path('asset/id/<str:pk>/duplicate/', permission_required_with_403('assets.create_asset')(views.AssetDuplicate.as_view()), name='asset_duplicate'),