def character_detail(request, object_id):
o = Character.objects.get(pk=object_id)
# Don't show other player's characters
- if (o.player != request.user):
+ if (not request.user.is_staff and o.player != request.user):
return HttpResponseForbidden("Forbidden -- Trying to view somebody else's character")
return render_to_response('influences/character_detail.html', {'object' : o}, RequestContext(request))
def influence_comment_preview(request, context_processors, extra_context, **kwargs):
# Use a custom template
kwargs['template'] = 'influences/influence_comment_preview.html'
- # The base template to extend
- extra_context['base'] = "influences/influence_detail.html"
# The object to be show in the influence detail
extra_context['object'] = get_object_or_404(Influence, pk=kwargs['object_id'])
return _preview(request, context_processors, extra_context, **kwargs)
o = Influence.objects.get(pk=object_id)
# Don't show other player's influences
- if (o.character.player != request.user):
+ if (not request.user.is_staff and o.character.player != request.user):
return HttpResponseForbidden("Forbidden -- Trying to view influences of somebody else's character")
# Show all comments to staff, but only public comments to other