From 70e53daadf088c04fc43677574f263353719263b Mon Sep 17 00:00:00 2001
From: Helmut Merz <helmutm@cy55.de>
Date: Mon, 15 Jun 2015 07:33:27 +0200
Subject: [PATCH] send email form: only accessible for logged-in users

---
 organize/browser/party.py | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/organize/browser/party.py b/organize/browser/party.py
index 6256d2a..3f9a78b 100644
--- a/organize/browser/party.py
+++ b/organize/browser/party.py
@@ -133,6 +133,10 @@ class SendEmailForm(NodeView):
 
     __call__ = innerHtml
 
+    def checkPermissions(self):
+        return (not self.isAnonymous and 
+                super(SendEmailForm, self).checkPermissions())
+
     @property
     def macro(self):
         return organize_macros.macros['send_email']
@@ -181,6 +185,10 @@ class SendEmailForm(NodeView):
 
 class SendEmail(FormController):
 
+    def checkPermissions(self):
+        return (not self.isAnonymous and 
+                super(SendEmail, self).checkPermissions())
+
     def update(self):
         form = self.request.form
         subject = form.get('subject') or u''