chibicitiberiu/ytsm
1
0
Fork 0
mirror of https://github.com/chibicitiberiu/ytsm.git synced 2024-02-24 05:43:31 +00:00
Code Issues Releases Wiki Activity

Show error message if not allowed to access admin page.

Browse Source
This commit is contained in:
Tiberiu Chibici 2018-12-29 17:18:54 +02:00
parent 8eca3dc7a9
commit 05ecb6a493
2 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
app/YtManagerApp/templates/YtManagerApp/settings_admin.html
View File

@ -4,8 +4,16 @@
{% block body %} {% block body %}
<div class="container"> <div class="container">
<h1>Admin settings</h1> <h1>Admin settings</h1>
{% if not request.user.is_authenticated or not request.user.is_superuser %}
<div class="alert alert-danger" role="alert">
You must be an administrator to access this page!
</div>
{% else %}
{% crispy form %} {% crispy form %}
{% endif %}
</div> </div>
{% endblock body %} {% endblock body %}

6
app/YtManagerApp/views/settings.py
View File

@ -24,12 +24,6 @@ class AdminSettingsView(LoginRequiredMixin, FormView):
template_name = 'YtManagerApp/settings_admin.html' template_name = 'YtManagerApp/settings_admin.html'
success_url = reverse_lazy('home') success_url = reverse_lazy('home')
def get(self, request, *args, **kwargs):
if not request.user.is_authenticated or not request.user.is_superuser:
return HttpResponseForbidden()
return super().get(request, *args, **kwargs)
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
if not request.user.is_authenticated or not request.user.is_superuser: if not request.user.is_authenticated or not request.user.is_superuser:
return HttpResponseForbidden() return HttpResponseForbidden()