cco/loops
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

don't try to get a view for an object the user does not have access to

Browse source
This commit is contained in:
Helmut Merz 2015-12-01 20:47:26 +01:00
parent f1b7e01cbc
commit 8080342620
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
organize/tracking/report.py
View file

@ -264,7 +264,7 @@ class TrackDetails(BaseView):
@Lazy @Lazy
def objectData(self): def objectData(self):
obj = self.object obj = self.object
if obj is None: if obj is None or not canAccessObject(obj):
return dict(object=None, title='-', description='', return dict(object=None, title='-', description='',
type='-', url='', type='-', url='',
version=None, canAccess=False) version=None, canAccess=False)
@ -283,7 +283,7 @@ class TrackDetails(BaseView):
versionable.versionId) or '') versionable.versionId) or '')
return dict(object=obj, title=title, description=desc, return dict(object=obj, title=title, description=desc,
type=self.longTypeTitle, url=url, version=version, type=self.longTypeTitle, url=url, version=version,
canAccess=canAccessObject(obj)) canAccess=True)
@Lazy @Lazy
def user(self): def user(self):