Let coaches update payment of the team
Signed-off-by: Emmy D'Anello <emmy.danello@animath.fr>
This commit is contained in:
parent
71e33b2177
commit
afbc67c413
|
@ -449,9 +449,13 @@ class PaymentUpdateView(LoginRequiredMixin, UpdateView):
|
||||||
form_class = PaymentAdminForm
|
form_class = PaymentAdminForm
|
||||||
|
|
||||||
def dispatch(self, request, *args, **kwargs):
|
def dispatch(self, request, *args, **kwargs):
|
||||||
if not self.request.user.is_authenticated or \
|
user = self.request.user
|
||||||
not self.request.user.registration.is_admin \
|
object = self.get_object()
|
||||||
and self.request.user.registration not in self.get_object().registrations.all():
|
if not user.is_authenticated or \
|
||||||
|
not user.registration.is_admin \
|
||||||
|
and (user.registration.is_volunteer and user.registration in object.tournament.organizers.all()
|
||||||
|
or user.registration.is_student and user.registration not in object.registrations.all()
|
||||||
|
or user.registration.is_coach and user.registration.team != object.team):
|
||||||
return self.handle_no_permission()
|
return self.handle_no_permission()
|
||||||
return super().dispatch(request, *args, **kwargs)
|
return super().dispatch(request, *args, **kwargs)
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue