From 7d65c823b5324ef7cbef8a27fa0e8c45bb19278f Mon Sep 17 00:00:00 2001 From: Matthijs Kooijman Date: Tue, 19 Oct 2010 17:19:40 +0200 Subject: [PATCH] tickets: Require valid permissions for the payments view. --- tickets/views.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tickets/views.py b/tickets/views.py index c89d26a..a6dff54 100644 --- a/tickets/views.py +++ b/tickets/views.py @@ -5,6 +5,7 @@ import datetime import django from django.shortcuts import render_to_response from django.template import RequestContext +from django.contrib.auth.decorators import permission_required from models import Booking, TICKET_PRICE @@ -84,6 +85,7 @@ class PaymentConfirmForm(django.forms.Form): # This field is used to distinguish these two forms confirm = django.forms.BooleanField(initial=True, widget=django.forms.HiddenInput) +@permission_required('tickets.change_booking') def payments(request): c = {} bookings = None -- 2.30.2