From: Matthijs Kooijman <matthijs@stdin.nl>
Date: Fri, 16 Jan 2009 21:24:53 +0000 (+0100)
Subject: Allow all related players to view an influence.
X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fprojects%2Fxerxes.git;a=commitdiff_plain;h=1cd59e8549989819ba961a440edd0fafd662d1a9

Allow all related players to view an influence.
---

diff --git a/influences/views.py b/influences/views.py
index b202c07..e741605 100644
--- a/influences/views.py
+++ b/influences/views.py
@@ -101,8 +101,8 @@ def influence_detail(request, object_id):
 
     o = Influence.objects.get(pk=object_id)
     # Don't show other player's influences
-    if (not request.user.is_staff and o.initiator.player != request.user):
-        return HttpResponseForbidden("Forbidden -- Trying to view influences of somebody else's character")
+    if (not request.user.is_staff and not request.user in o.related_players):
+        return HttpResponseForbidden("Forbidden -- Trying to view influences you are not involved in.")
 
     # Show all comments to staff, but only public comments to other
     # users