CGM_Public/pretix_cgo
1
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

Improved permission testing

Browse Source
This commit is contained in:
Raphael Michel
2016-06-10 15:43:35 +02:00
parent 66bcbc785b
commit f4cefa9ad4
2 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/pretix/control/views/orders.py
View File

@@ -223,6 +223,9 @@ class OrderInvoiceCreate(OrderView):
messages.success(self.request, _('The invoice has been generated.'))
return redirect(self.get_order_url())
def get(self, *args, **kwargs):
return HttpResponseNotAllowed(['POST'])
class OrderResendLink(OrderView):
permission = 'can_change_orders'
@@ -245,6 +248,9 @@ class OrderResendLink(OrderView):
self.order.log_action('pretix.event.order.resend', user=self.request.user)
return redirect(self.get_order_url())
def get(self, *args, **kwargs):
return HttpResponseNotAllowed(['POST'])
class InvoiceDownload(EventPermissionRequiredMixin, View):
permission = 'can_view_orders'