From 6a1033b784e94eccab19176d69d8d6a9b2ed72fe Mon Sep 17 00:00:00 2001 From: Guillaume Date: Thu, 8 Dec 2016 20:49:57 +0100 Subject: [PATCH] =?UTF-8?q?Emp=C3=AAche=20un=20membre=20non=20staff=20d'?= =?UTF-8?q?=C3=A9diter=20le=20profil=20d'un=20autre=20membre=20(#4041)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * EmpĂȘche un membre non staff d'Ă©diter le profil d'un autre membre * Correction * PEP-8 --- zds/member/views.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/zds/member/views.py b/zds/member/views.py index a6eb0fd220..680a7cf6b5 100644 --- a/zds/member/views.py +++ b/zds/member/views.py @@ -593,6 +593,9 @@ def articles(request): def settings_mini_profile(request, user_name): """Minimal settings of users for staff.""" + if not request.user.has_perm('member.change_profile'): + raise PermissionDenied + # extra information about the current user profile = get_object_or_404(Profile, user__username=user_name) if request.method == "POST":