def character_detail(request, object_id):
o = Character.objects.get(pk=object_id)
# Don't show other player's characters
- if (o.player != request.user):
+ if (not request.user.is_staff and o.player != request.user):
return HttpResponseForbidden("Forbidden -- Trying to view somebody else's character")
return render_to_response('influences/character_detail.html', {'object' : o}, RequestContext(request))
o = Influence.objects.get(pk=object_id)
# Don't show other player's influences
- if (o.character.player != request.user):
+ if (not request.user.is_staff and o.character.player != request.user):
return HttpResponseForbidden("Forbidden -- Trying to view influences of somebody else's character")
# Show all comments to staff, but only public comments to other