Changeset a484cbf for asadb

Timestamp:

Aug 7, 2011, 9:05:54 PM (14 years ago)

Author:

Alex Dehnert <adehnert@…>

Branches:

master, space-access, stable, stage, test-hooks

Children:

0abb44b

Parents:

2dd6045

git-author:

Alex Dehnert <adehnert@…> (08/07/11 21:05:54)

git-committer:

Alex Dehnert <adehnert@…> (08/07/11 21:05:54)

Message:

Limit which fields non-Exec can update

Location:

asadb

Files:

• groups/views.py (modified) (4 diffs)
• util/forms.py (added)

asadb/groups/views.py

@@ -22 +22 @@
 import reversion.models
 
+from util.forms import StaticWidget
+
 class GroupChangeMainForm(form_utils.forms.BetterModelForm):
+    def __init__(self, *args, **kwargs):
+        change_restricted = False
+        if 'change_restricted' in kwargs:
+            change_restricted = kwargs['change_restricted']
+            del kwargs['change_restricted']
+        super(GroupChangeMainForm, self).__init__(*args, **kwargs)
+        if change_restricted:
+            for field_name in self.exec_only_fields:
+                value = getattr(self.instance, field_name)
+                formfield = self.fields[field_name]
+                formfield.widget = StaticWidget(value=value)
+
+    exec_only_fields = [
+        'name', 'abbreviation',
+        'athena_locker',
+    ]
+
     class Meta:
         fieldsets = [
@@ -49 +68 @@
     if not request.user.has_perm('groups.admin_group', group):
         raise PermissionDenied
+    change_restricted = True
+    if request.user.has_perm('groups.change_group', group):
+        change_restricted = False
 
     msg = None
@@ -54 +76 @@
     initial = {}
     if request.method == 'POST': # If the form has been submitted...
-        form = GroupChangeMainForm(request.POST, request.FILES, instance=group, ) # A form bound to the POST data
+        # A form bound to the POST data
+        form = GroupChangeMainForm(
+            request.POST, request.FILES,
+            change_restricted=change_restricted,
+            instance=group,
+        )
 
         if form.is_valid(): # All validation rules pass
@@ -84 +111 @@
 
     else:
-        form = GroupChangeMainForm(instance=group, initial=initial, ) # An unbound form
+        form = GroupChangeMainForm(change_restricted=change_restricted, instance=group, initial=initial, ) # An unbound form
 
     context = {