130 Commits

Author	SHA1	Message	Date
Yohann D'ANELLO	56c41258b9	Highlight non-validated activities	2020-08-30 23:54:54 +02:00
Yohann D'ANELLO	7d539d44e5	Display form error when a permission is missing rather than display a 403 page	2020-08-30 16:23:55 +02:00
Yohann D'ANELLO	374e6ed7f8	💚 Fix CI	2020-08-30 11:59:10 +02:00
Alexandre Iooss	891955cedf	Cards for all rights template	2020-08-22 10:01:22 +02:00
Rida Lali	2672721235	Add blocks with collapse animation instead of display all	2020-08-21 08:18:00 +02:00
Yohann D'ANELLO	b8c3dda95b	Replace timezone.now().date() by date.today()	2020-08-16 00:35:13 +02:00
Yohann D'ANELLO	da23df05cb	Kfet members can edit their own WEI registration	2020-08-16 00:15:33 +02:00
Yohann D'ANELLO	4997a37058	Ensure that the user is authenticated before that it has the permission to see page	2020-08-15 23:27:58 +02:00
Yohann D'ANELLO	5abbb84254	Permissions for activities must be more specific to prevent that anyone can validate its own activity	2020-08-15 22:24:48 +02:00
Yohann D'ANELLO	a43abee00b	Don't log database changes when we check a permission	2020-08-14 19:00:57 +02:00
Yohann D'ANELLO	bb2704323a	Spam click on invalidity button is no longer possible	2020-08-13 17:04:10 +02:00
Yohann D'ANELLO	c466715e8a	Raise permission denied on CreateView if you don't have the permission to create a sample instance, see #53	2020-08-13 15:20:15 +02:00
Yohann D'ANELLO	b7a88a387c	More tests in WEI app, but we can still go further	2020-08-11 01:03:29 +02:00
Yohann D'ANELLO	c612e159cf	See user information does not imply see the note balance	2020-08-10 16:32:45 +02:00
Yohann D'ANELLO	1b84c8c603	🐛 The balance must be greater than the *total* amount of a transaction, not the unit price	2020-08-10 16:05:50 +02:00
Alexandre Iooss	7b40ee1ca4	Reorder templates	2020-08-09 19:06:57 +02:00
Yohann D'ANELLO	29f84ea007	Remove test code	2020-08-09 15:42:07 +02:00
Yohann D'ANELLO	679ac3a652	Lock invoices, delete them	2020-08-07 11:04:54 +02:00
Yohann D'ANELLO	0de69cbfaf	💚 Fix linters	2020-08-06 12:50:24 +02:00
Yohann D'ANELLO	24ac3ce45f	Display users that have surnormal roles	2020-08-05 21:07:31 +02:00
Yohann D'ANELLO	c205219d47	🐛 Fix transaction update concurency	2020-08-05 19:42:44 +02:00
Yohann D'ANELLO	6c9cf73848	Update permissions to see our own note	2020-08-05 12:22:35 +02:00
Yohann D'ANELLO	5ea8d8f870	🎨 Update activity interface	2020-08-03 16:11:05 +02:00
Yohann D'ANELLO	0e8174aacd	🐛 Fix objects with pk 0	2020-08-03 10:50:55 +02:00
Yohann D'ANELLO	58fe8914cf	🐛 Fix infinite loop in permission check	2020-08-02 22:39:30 +02:00
Yohann D'ANELLO	f870af139e	Typos	2020-08-02 09:51:39 +02:00
Yohann D'ANELLO	7742358b8f	Secretaries can view and add memberships	2020-08-02 09:49:45 +02:00
Yohann D'ANELLO	8de7ba14bd	Add permission for secretaries	2020-08-02 09:35:32 +02:00
Yohann D'ANELLO	8497dbb25c	Club members can see the club	2020-08-02 09:30:18 +02:00
Yohann D'ANELLO	2f018f8c9d	Always query distinct objects	2020-08-02 08:57:16 +02:00
Yohann D'ANELLO	b706efe463	2A+ can change their selected bus or team if the registration is not validated	2020-08-01 23:27:07 +02:00
Yohann D'ANELLO	8434841ec5	Fix one permission	2020-08-01 22:28:28 +02:00
Yohann D'ANELLO	b6453ce03d	💄 Improve Django Admin	2020-08-01 15:13:29 +02:00
Yohann D'ANELLO	d7b834d908	Translate rights	2020-07-31 22:29:23 +02:00
Yohann D'ANELLO	dca655949e	Improve transfer UI	2020-07-31 21:24:23 +02:00
Yohann D'ANELLO	72dcc93136	Club managers can register new members to a club, even if they don't have the right to create a transaction	2020-07-31 09:49:43 +02:00
Yohann D'ANELLO	ae629b55ad	Add HTML titles	2020-07-30 17:30:21 +02:00
Yohann D'ANELLO	aa66361ac7	Update permissions to create clubs. ... For now, only superusers can edit the roles of a user.	2020-07-30 16:36:44 +02:00
Yohann D'ANELLO	e9cbc8e623	Fix linters	2020-07-30 15:53:23 +02:00
Yohann D'ANELLO	9361f3f2f0	Aliases should load really faster	2020-07-30 15:07:30 +02:00
Yohann D'ANELLO	e63219f7ad	Force delete some objects	2020-07-30 14:58:18 +02:00
Yohann D'ANELLO	0c0aed0234	🐛 Force delete didn't work as well when trying to check add permissions	2020-07-30 13:10:03 +02:00
Yohann D'ANELLO	fb775de923	Add backdoor to login as other users (in debug mode only)	2020-07-30 12:50:48 +02:00
Yohann D'ANELLO	cbd36f110a	Another uplicated permission	2020-07-29 19:13:29 +02:00
Yohann D'ANELLO	c9e68ca66b	Duplicated permission	2020-07-29 19:12:16 +02:00
Yohann D'ANELLO	5a91cac08d	Add permissions to see clubs and users	2020-07-29 18:37:42 +02:00
Yohann D'ANELLO	4549255198	Treasurers can update invalidity reason	2020-07-29 17:42:06 +02:00
Yohann D'ANELLO	750bdcb2c5	Treasurers can of course click on buttons. Fix PATCH requests on the API	2020-07-29 12:25:53 +02:00
Yohann D'ANELLO	b8a88eeda4	Only staff with good permission mask can visit Django Admin	2020-07-29 11:38:59 +02:00
Yohann D'ANELLO	3a4145e4d9	Woops, roles didn't have the permissions	2020-07-28 20:56:22 +02:00