From aa19d3f936fcaae6452aab9486e0ebac5500bea8 Mon Sep 17 00:00:00 2001
From: Phuoc CAO <phuoc@caotek.fr>
Date: Mon, 27 Jul 2020 08:52:12 +0200
Subject: [PATCH] =?UTF-8?q?autoriser=20access=20>=3D=208=20=C3=A0=20modifi?=
 =?UTF-8?q?=C3=A9=20un=20RDF=20factur=C3=A9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 mondumas/templates/dossier/rdf_view.pt | 3 ++-
 mondumas/views/dossier.py              | 4 ++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/mondumas/templates/dossier/rdf_view.pt b/mondumas/templates/dossier/rdf_view.pt
index 0f95665..4d9b85d 100644
--- a/mondumas/templates/dossier/rdf_view.pt
+++ b/mondumas/templates/dossier/rdf_view.pt
@@ -347,7 +347,8 @@
                 <div class="form-group">					
                     <a class="btn btn-default" href="${request.route_url('dossier_view', nodossier=nodossier)}">
                         <span class="glyphicon glyphicon-arrow-left"></span> Retour Dossier</a>
-                    <a class="btn btn-primary" href="/rdf_edit/${nodossier}/${rapport.date_inter.strftime('%Y-%m-%d')}" tal:condition="date_facture==''">
+                    <a class="btn btn-primary" href="/rdf_edit/${nodossier}/${rapport.date_inter.strftime('%Y-%m-%d')}" 
+                        tal:condition="date_facture=='' or access>=8">
                         <span class="glyphicon glyphicon-pencil"></span> Modifier</a>
                     <button class="btn btn-danger" type="submit" name="form.delete" tal:condition="not rapport.signature_svg and date_relu==''">
                         <span class="glyphicon glyphicon-remove"></span> Supprimer</button>
diff --git a/mondumas/views/dossier.py b/mondumas/views/dossier.py
index 573567d..03f9f58 100644
--- a/mondumas/views/dossier.py
+++ b/mondumas/views/dossier.py
@@ -102,6 +102,9 @@ def dossier_view(request):
     nodossier = request.matchdict['nodossier']
     societe = nodossier[0:2]
     logged_in = request.authenticated_userid.upper()
+    # lire son niveau d'accès
+    member = get_member_by_id(request, logged_in)
+    access = member.access 
     
     url = request.route_url("dossier_view", nodossier=nodossier)
 
@@ -136,6 +139,7 @@ def dossier_view(request):
         'docs_attaches': docs_attaches,
         'docs_url': request.static_url(request.registry.settings['mondumas.devfac_url']),
         'bg_color': bg_color,
+        'access': access,
     }
 
 @view_config(route_name='devis_view', renderer='../templates/dossier/devis_view.pt', permission='view')