CHANGE: Restrict viewing asset DB to keyholders.

This is in line with what it was when it was on the Shared Drive.
This commit is contained in:
2019-12-04 23:59:39 +00:00
parent 4f036af85a
commit 2c334196d5
2 changed files with 8 additions and 8 deletions

View File

@@ -20,7 +20,7 @@
<a class="list-group-item" href="{% url 'rigboard' %}"><span class="glyphicon glyphicon-list"></span> Rigboard</a>
<a class="list-group-item" href="{% url 'web_calendar' %}"><span class="glyphicon glyphicon-calendar"></span> Calendar</a>
{% if perms.RIGS.add_event %}<a class="list-group-item" href="{% url 'event_create' %}"><span class="glyphicon glyphicon-plus"></span> New Event</a>{% endif %}
<a class="list-group-item" href="{% url 'asset_index' %}"><span class="glyphicon glyphicon-tag"></span> Asset Database </a>
{% if perms.assets.view_asset %}<a class="list-group-item" href="{% url 'asset_index' %}"><span class="glyphicon glyphicon-tag"></span> Asset Database</a>{% endif %}
<div class="list-group-item default"></div>

View File

@@ -4,9 +4,9 @@ from assets import views
from PyRIGS.decorators import permission_required_with_403
urlpatterns = [
path('', views.AssetList.as_view(), name='asset_index'),
path('asset/list/', views.AssetList.as_view(), name='asset_list'),
path('asset/id/<str:pk>/', views.AssetDetail.as_view(), name='asset_detail'),
path('', permission_required_with_403('assets.view_asset')(views.AssetList.as_view()), name='asset_index'),
path('asset/list/', permission_required_with_403('assets.view_asset')(views.AssetList.as_view()), name='asset_list'),
path('asset/id/<str:pk>/', permission_required_with_403('assets.view_asset')(views.AssetDetail.as_view()), name='asset_detail'),
path('asset/create/', permission_required_with_403('assets.create_asset')(views.AssetCreate.as_view()), name='asset_create'),
path('asset/id/<str:pk>/edit/', permission_required_with_403('assets.change_asset')(views.AssetEdit.as_view()), name='asset_update'),
path('asset/id/<str:pk>/duplicate/', permission_required_with_403('assets.create_asset')(views.AssetDuplicate.as_view()), name='asset_duplicate'),