mirror of https://gitlab.crans.org/bde/nk20
Transactions are not invalidable if the user doesn't have the right to
This commit is contained in:
parent
ae629b55ad
commit
ad2cc22964
|
@ -8,6 +8,8 @@ from django.db.models import F
|
||||||
from django.utils.html import format_html
|
from django.utils.html import format_html
|
||||||
from django_tables2.utils import A
|
from django_tables2.utils import A
|
||||||
from django.utils.translation import gettext_lazy as _
|
from django.utils.translation import gettext_lazy as _
|
||||||
|
from note_kfet.middlewares import get_current_authenticated_user
|
||||||
|
from permission.backends import PermissionBackend
|
||||||
|
|
||||||
from .models.notes import Alias
|
from .models.notes import Alias
|
||||||
from .models.transactions import Transaction, TransactionTemplate
|
from .models.transactions import Transaction, TransactionTemplate
|
||||||
|
@ -52,14 +54,26 @@ class HistoryTable(tables.Table):
|
||||||
attrs={
|
attrs={
|
||||||
"td": {
|
"td": {
|
||||||
"id": lambda record: "validate_" + str(record.id),
|
"id": lambda record: "validate_" + str(record.id),
|
||||||
"class": lambda record: str(record.valid).lower() + ' validate',
|
"class": lambda record:
|
||||||
|
str(record.valid).lower()
|
||||||
|
+ (' validate' if PermissionBackend.check_perm(get_current_authenticated_user(),
|
||||||
|
"note.change_transaction_invalidity_reason",
|
||||||
|
record) else ''),
|
||||||
"data-toggle": "tooltip",
|
"data-toggle": "tooltip",
|
||||||
"title": lambda record: _("Click to invalidate") if record.valid else _("Click to validate"),
|
"title": lambda record: (_("Click to invalidate") if record.valid else _("Click to validate"))
|
||||||
"onclick": lambda record: 'de_validate(' + str(record.id) + ', ' + str(record.valid).lower() + ')',
|
if PermissionBackend.check_perm(get_current_authenticated_user(),
|
||||||
|
"note.change_transaction_invalidity_reason", record) else None,
|
||||||
|
"onclick": lambda record: 'de_validate(' + str(record.id) + ', ' + str(record.valid).lower() + ')'
|
||||||
|
if PermissionBackend.check_perm(get_current_authenticated_user(),
|
||||||
|
"note.change_transaction_invalidity_reason", record) else None,
|
||||||
"onmouseover": lambda record: '$("#invalidity_reason_'
|
"onmouseover": lambda record: '$("#invalidity_reason_'
|
||||||
+ str(record.id) + '").show();$("#invalidity_reason_'
|
+ str(record.id) + '").show();$("#invalidity_reason_'
|
||||||
+ str(record.id) + '").focus();',
|
+ str(record.id) + '").focus();'
|
||||||
"onmouseout": lambda record: '$("#invalidity_reason_' + str(record.id) + '").hide()',
|
if PermissionBackend.check_perm(get_current_authenticated_user(),
|
||||||
|
"note.change_transaction_invalidity_reason", record) else None,
|
||||||
|
"onmouseout": lambda record: '$("#invalidity_reason_' + str(record.id) + '").hide()'
|
||||||
|
if PermissionBackend.check_perm(get_current_authenticated_user(),
|
||||||
|
"note.change_transaction_invalidity_reason", record) else None,
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
)
|
)
|
||||||
|
@ -88,6 +102,10 @@ class HistoryTable(tables.Table):
|
||||||
When the validation status is hovered, an input field is displayed to let the user specify an invalidity reason
|
When the validation status is hovered, an input field is displayed to let the user specify an invalidity reason
|
||||||
"""
|
"""
|
||||||
val = "✔" if value else "✖"
|
val = "✔" if value else "✖"
|
||||||
|
if not PermissionBackend\
|
||||||
|
.check_perm(get_current_authenticated_user(), "note.change_transaction_invalidity_reason", record):
|
||||||
|
return val
|
||||||
|
|
||||||
val += "<input type='text' class='form-control' id='invalidity_reason_" + str(record.id) \
|
val += "<input type='text' class='form-control' id='invalidity_reason_" + str(record.id) \
|
||||||
+ "' value='" + (html.escape(record.invalidity_reason)
|
+ "' value='" + (html.escape(record.invalidity_reason)
|
||||||
if record.invalidity_reason else ("" if value else str(_("No reason specified")))) \
|
if record.invalidity_reason else ("" if value else str(_("No reason specified")))) \
|
||||||
|
|
|
@ -171,7 +171,7 @@ class InvoiceRenderView(LoginRequiredMixin, View):
|
||||||
del tex
|
del tex
|
||||||
|
|
||||||
# The file has to be rendered twice
|
# The file has to be rendered twice
|
||||||
for _ in range(2):
|
for ignored in range(2):
|
||||||
error = subprocess.Popen(
|
error = subprocess.Popen(
|
||||||
["pdflatex", "invoice-{}.tex".format(pk)],
|
["pdflatex", "invoice-{}.tex".format(pk)],
|
||||||
cwd=tmp_dir,
|
cwd=tmp_dir,
|
||||||
|
|
Loading…
Reference in New Issue