tickets: Require valid permissions for the payments view.

diff --git a/tickets/views.py b/tickets/views.py
index c89d26ab041f5c5386aa62b0cf29c355136142e3..a6dff544363d6f6107337f56f3c69de29534ac92 100644 (file)
--- a/tickets/views.py
+++ b/tickets/views.py
@@ -5,6 +5,7 @@ import datetime
 import django
 from django.shortcuts import render_to_response
 from django.template import RequestContext
+from django.contrib.auth.decorators import permission_required
 
 from models import Booking, TICKET_PRICE
 
@@ -84,6 +85,7 @@ class PaymentConfirmForm(django.forms.Form):
     # This field is used to distinguish these two forms
     confirm = django.forms.BooleanField(initial=True, widget=django.forms.HiddenInput)
 
+@permission_required('tickets.change_booking')
 def payments(request):
     c = {}
     bookings = None