From 9d386d1ecf3682aaf5915a1d94cdf40c8b022f98 Mon Sep 17 00:00:00 2001 From: Yohann D'ANELLO Date: Wed, 6 Oct 2021 10:41:42 +0200 Subject: [PATCH] Unauthenticated users can't display activity entry view Signed-off-by: Yohann D'ANELLO --- apps/activity/views.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/apps/activity/views.py b/apps/activity/views.py index 366cadb3..1f966c65 100644 --- a/apps/activity/views.py +++ b/apps/activity/views.py @@ -168,6 +168,9 @@ class ActivityEntryView(LoginRequiredMixin, TemplateView): Don't display the entry interface if the user has no right to see it (no right to add an entry for itself), it is closed or doesn't manage entries. """ + if not self.request.user.is_authenticated: + return self.handle_no_permission() + activity = Activity.objects.get(pk=self.kwargs["pk"]) sample_entry = Entry(activity=activity, note=self.request.user.note)