Check permission on upload page
This commit is contained in:
parent
ead7a0b71e
commit
0b59d42b41
1 changed files with 5 additions and 3 deletions
|
|
@ -6,7 +6,8 @@ import zipfile
|
||||||
from io import BytesIO
|
from io import BytesIO
|
||||||
|
|
||||||
from django.contrib import messages
|
from django.contrib import messages
|
||||||
from django.contrib.auth.mixins import LoginRequiredMixin
|
from django.contrib.auth.mixins import (LoginRequiredMixin,
|
||||||
|
PermissionRequiredMixin)
|
||||||
from django.core.mail import mail_managers
|
from django.core.mail import mail_managers
|
||||||
from django.db import IntegrityError
|
from django.db import IntegrityError
|
||||||
from django.http import HttpResponse
|
from django.http import HttpResponse
|
||||||
|
|
@ -16,8 +17,8 @@ from django.views.generic.detail import DetailView
|
||||||
from django.views.generic.edit import FormView
|
from django.views.generic.edit import FormView
|
||||||
from photologue.models import Gallery, Photo
|
from photologue.models import Gallery, Photo
|
||||||
from photologue.views import GalleryArchiveIndexView, GalleryYearArchiveView
|
from photologue.views import GalleryArchiveIndexView, GalleryYearArchiveView
|
||||||
from taggit.models import Tag
|
|
||||||
from PIL import Image
|
from PIL import Image
|
||||||
|
from taggit.models import Tag
|
||||||
|
|
||||||
from .forms import UploadForm
|
from .forms import UploadForm
|
||||||
from .models import PhotoExtended
|
from .models import PhotoExtended
|
||||||
|
|
@ -101,13 +102,14 @@ class GalleryDownload(LoginRequiredMixin, DetailView):
|
||||||
return response
|
return response
|
||||||
|
|
||||||
|
|
||||||
class GalleryUpload(FormView):
|
class GalleryUpload(PermissionRequiredMixin, FormView):
|
||||||
"""
|
"""
|
||||||
Form to upload new photos in a gallery
|
Form to upload new photos in a gallery
|
||||||
"""
|
"""
|
||||||
form_class = UploadForm
|
form_class = UploadForm
|
||||||
template_name = "photologue/upload.html"
|
template_name = "photologue/upload.html"
|
||||||
success_url = reverse_lazy("gallery-upload")
|
success_url = reverse_lazy("gallery-upload")
|
||||||
|
permission_required = 'photologue.add_gallery'
|
||||||
|
|
||||||
def form_valid(self, form):
|
def form_valid(self, form):
|
||||||
# Upload photos
|
# Upload photos
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue