From 2908ce736757d765e44fd8e1b6b782154c2e77ce Mon Sep 17 00:00:00 2001 From: Phuoc CAO Date: Fri, 15 Jan 2021 18:28:56 +0100 Subject: [PATCH] fixed private doc view --- caotek_mesavoirs/views/contents.py | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/caotek_mesavoirs/views/contents.py b/caotek_mesavoirs/views/contents.py index d4aa2e8..6afb583 100644 --- a/caotek_mesavoirs/views/contents.py +++ b/caotek_mesavoirs/views/contents.py @@ -13,8 +13,8 @@ from pyramid.httpexceptions import ( from ..models.contents import * -def isAnonymous(self): - logged_in = self.request.authenticated_userid +def isAnonymous(request): + logged_in = request.authenticated_userid return logged_in is None @view_config(route_name='folder', renderer='../templates/contents/folder.pt') @@ -36,6 +36,10 @@ def doc_edit(request): url = request.route_url('doc_edit',doc_id=doc_id) logged_in = request.authenticated_userid + # si anonyme, interdire de voir les docs privés + if isAnonymous(request) and doc.statut == 'private': + return HTTPFound(location=request.route_url('home')) + message = "" themes = get_docs_themes(request, logged_in) tags = get_docs_tags(request) @@ -110,9 +114,9 @@ def doc_view(request): # lire le document doc = get_docs(request, doc_id) - - if isAnonymous and doc.statut == 'private': - # si anonyme, interdire de voir les docs privés + + # si anonyme, interdire de voir les docs privés + if isAnonymous(request) and doc.statut == 'private': return HTTPFound(location=request.route_url('home')) if doc_id == '2':