X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fprojects%2Fxerxes.git;a=blobdiff_plain;f=influences%2Fviews.py;h=e741605e9acad8e94efb4f96552c1ea2daa85c0f;hp=b202c075efab02375cbe8a735a15cc14607b111d;hb=1cd59e8549989819ba961a440edd0fafd662d1a9;hpb=236fd15bbbae94b7a76473ba3f93e2f0e94d28d6 diff --git a/influences/views.py b/influences/views.py index b202c07..e741605 100644 --- a/influences/views.py +++ b/influences/views.py @@ -101,8 +101,8 @@ def influence_detail(request, object_id): o = Influence.objects.get(pk=object_id) # Don't show other player's influences - if (not request.user.is_staff and o.initiator.player != request.user): - return HttpResponseForbidden("Forbidden -- Trying to view influences of somebody else's character") + if (not request.user.is_staff and not request.user in o.related_players): + return HttpResponseForbidden("Forbidden -- Trying to view influences you are not involved in.") # Show all comments to staff, but only public comments to other # users