From: Matthijs Kooijman <matthijs@stdin.nl>
Date: Tue, 19 Oct 2010 15:19:40 +0000 (+0200)
Subject: tickets: Require valid permissions for the payments view.
X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fprojects%2Fdorestad-bookings.git;a=commitdiff_plain;h=7d65c823b5324ef7cbef8a27fa0e8c45bb19278f

tickets: Require valid permissions for the payments view.
---

diff --git a/tickets/views.py b/tickets/views.py
index c89d26a..a6dff54 100644
--- a/tickets/views.py
+++ b/tickets/views.py
@@ -5,6 +5,7 @@ import datetime
 import django
 from django.shortcuts import render_to_response
 from django.template import RequestContext
+from django.contrib.auth.decorators import permission_required
 
 from models import Booking, TICKET_PRICE
 
@@ -84,6 +85,7 @@ class PaymentConfirmForm(django.forms.Form):
     # This field is used to distinguish these two forms
     confirm = django.forms.BooleanField(initial=True, widget=django.forms.HiddenInput)
 
+@permission_required('tickets.change_booking')
 def payments(request):
     c = {}
     bookings = None