diff --git a/src/pretix/control/views/event.py b/src/pretix/control/views/event.py index d566050fca..ca5a158b7a 100644 --- a/src/pretix/control/views/event.py +++ b/src/pretix/control/views/event.py @@ -1554,7 +1554,7 @@ class WidgetSettings(EventSettingsViewMixin, EventPermissionRequiredMixin, FormV return ctx -class QuickSetupView(FormView): +class QuickSetupView(EventPermissionRequiredMixin, FormView): template_name = 'pretixcontrol/event/quick_setup.html' permission = 'event.settings.general:write' form_class = QuickSetupForm diff --git a/src/tests/control/test_permissions.py b/src/tests/control/test_permissions.py index aaff20d9ee..3748a2ecb9 100644 --- a/src/tests/control/test_permissions.py +++ b/src/tests/control/test_permissions.py @@ -90,6 +90,7 @@ event_urls = [ "delete/", "dangerzone/", "cancel/", + "quickstart/", "settings/", "settings/plugins", "settings/payment", @@ -310,6 +311,7 @@ event_permission_urls = [ ("event.settings.general:write", "live/", 200, HTTP_GET), ("event.settings.general:write", "delete/", 200, HTTP_GET), ("event.settings.general:write", "dangerzone/", 200, HTTP_GET), + ("event.settings.general:write", "quickstart/", 200, HTTP_GET), ("event.settings.general:write", "settings/", 200, HTTP_GET), # ("event.settings.payment:write", "settings/payment", 200, HTTP_GET), GET allowed also with other permissions ("event.settings.payment:write", "settings/payment", 200, HTTP_POST),