ynerant/plateforme-tfjm2
1
0
Fork 0
mirror of https://gitlab.com/animath/si/plateforme.git synced 2024-12-25 07:02:22 +00:00
Code Issues Releases Wiki Activity

Non-admin users can't promote themselves to admin users

Browse Source 
Signed-off-by: Emmy D'Anello <emmy.danello@animath.fr>
This commit is contained in:
Emmy D'Anello 2023-05-20 11:35:37 +02:00
parent 310ac70a74
commit 777ae059f9
Signed by: ynerant
GPG Key ID: 3A75C55819C8CF85
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
registration/views.py
View File

@ -275,6 +275,8 @@ class UserUpdateView(UserMixin, UpdateView):
if not self.request.user.registration.is_admin: if not self.request.user.registration.is_admin:
if "team" in context["registration_form"].fields: if "team" in context["registration_form"].fields:
del context["registration_form"].fields["team"] del context["registration_form"].fields["team"]
if "admin" in context["registration_form"].fields:
del context["registration_form"].fields["admin"]
del context["registration_form"].fields["email_confirmed"] del context["registration_form"].fields["email_confirmed"]
return context return context
@ -286,6 +288,8 @@ class UserUpdateView(UserMixin, UpdateView):
if not self.request.user.registration.is_admin: if not self.request.user.registration.is_admin:
if "team" in registration_form.fields: if "team" in registration_form.fields:
del registration_form.fields["team"] del registration_form.fields["team"]
if "admin" in registration_form.fields:
del registration_form.fields["admin"]
del registration_form.fields["email_confirmed"] del registration_form.fields["email_confirmed"]
if not registration_form.is_valid(): if not registration_form.is_valid():