X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fprojects%2Fxerxes.git;a=blobdiff_plain;f=influences%2Fviews.py;h=7f7b2621f918a588e03e7e356853b0d45514ffb7;hp=35ee02ef921227f8faf626fb355ad031c8422440;hb=dec395df81b874a8b88e34935712f9265d412eef;hpb=00d8d2a562697bbae1f846cfa1ecd0cf45267ade diff --git a/influences/views.py b/influences/views.py index 35ee02e..7f7b262 100644 --- a/influences/views.py +++ b/influences/views.py @@ -79,7 +79,7 @@ def character_list(request): def character_detail(request, object_id): o = Character.objects.get(pk=object_id) # Don't show other player's characters - if (o.player != request.user): + if (not request.user.is_staff and o.player != request.user): return HttpResponseForbidden("Forbidden -- Trying to view somebody else's character") return render_to_response('influences/character_detail.html', {'object' : o}, RequestContext(request)) @@ -101,7 +101,7 @@ def influence_detail(request, object_id): o = Influence.objects.get(pk=object_id) # Don't show other player's influences - if (o.character.player != request.user): + if (not request.user.is_staff and o.character.player != request.user): return HttpResponseForbidden("Forbidden -- Trying to view influences of somebody else's character") # Show all comments to staff, but only public comments to other