X-Git-Url: https://git.stderr.nl/gitweb?a=blobdiff_plain;f=influences%2Fviews.py;h=e741605e9acad8e94efb4f96552c1ea2daa85c0f;hb=86800ade2dc1966a05ddc437ca67111dd87fd34f;hp=b202c075efab02375cbe8a735a15cc14607b111d;hpb=d55284fdb62ff1b4d8dec653bf13cf44b4b01022;p=matthijs%2Fprojects%2Fxerxes.git

diff --git a/influences/views.py b/influences/views.py
index b202c07..e741605 100644
--- a/influences/views.py
+++ b/influences/views.py
@@ -101,8 +101,8 @@ def influence_detail(request, object_id):
 
     o = Influence.objects.get(pk=object_id)
     # Don't show other player's influences
-    if (not request.user.is_staff and o.initiator.player != request.user):
-        return HttpResponseForbidden("Forbidden -- Trying to view influences of somebody else's character")
+    if (not request.user.is_staff and not request.user in o.related_players):
+        return HttpResponseForbidden("Forbidden -- Trying to view influences you are not involved in.")
 
     # Show all comments to staff, but only public comments to other
     # users