From 7c89aa62ccac0d4ad82a9f8c6461d77ac2076ab2 Mon Sep 17 00:00:00 2001 From: Yohann D'ANELLO Date: Mon, 18 May 2020 23:51:13 +0200 Subject: [PATCH] Final organizers can see the team information --- apps/member/views.py | 4 ++-- apps/tournament/views.py | 2 ++ 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/apps/member/views.py b/apps/member/views.py index 1cbc9e7..0381da7 100644 --- a/apps/member/views.py +++ b/apps/member/views.py @@ -14,7 +14,7 @@ from django.views.generic import CreateView, UpdateView, DetailView, FormView from django_tables2 import SingleTableView from tournament.forms import TeamForm, JoinTeam from tournament.models import Team -from tournament.views import AdminMixin, TeamMixin +from tournament.views import AdminMixin, TeamMixin, OrgaMixin from .forms import SignUpForm, TFJMUserForm, AdminUserForm, CoachUserForm from .models import TFJMUser, Document, Solution, MotivationLetter, Synthesis @@ -235,7 +235,7 @@ class OrphanedProfileListView(AdminMixin, SingleTableView): extra_context = dict(title=_("Orphaned profiles"), type="orphaned") -class OrganizersListView(AdminMixin, SingleTableView): +class OrganizersListView(OrgaMixin, SingleTableView): """ List all organizers. """ diff --git a/apps/tournament/views.py b/apps/tournament/views.py index 4b4052a..184378d 100644 --- a/apps/tournament/views.py +++ b/apps/tournament/views.py @@ -156,6 +156,8 @@ class TeamDetailView(LoginRequiredMixin, DetailView): """ if not request.user.is_authenticated or \ (not request.user.admin and self.request.user not in self.get_object().tournament.organizers.all() + and not (self.get_object().selected_for_final + and request.user in Tournament.get_final().organizers.all()) and self.get_object() != request.user.team): raise PermissionDenied return super().dispatch(request, *args, **kwargs)