From 238bf867fb52dd7608c7db9b7826dbb548cd5f94 Mon Sep 17 00:00:00 2001 From: Sander Roosendaal Date: Tue, 13 Jun 2017 22:29:29 +0200 Subject: [PATCH] added check of rower plan to multi compare --- rowers/views.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/rowers/views.py b/rowers/views.py index 0cb50f1f..c1a8a455 100644 --- a/rowers/views.py +++ b/rowers/views.py @@ -3127,6 +3127,8 @@ def team_comparison_select(request, r = getrower(request.user) except Rower.DoesNotExist: raise Http404("Rower doesn't exist") + + if request.method == 'POST': dateform = DateRangeForm(request.POST) @@ -3158,6 +3160,9 @@ def team_comparison_select(request, except Team.DoesNotExist: theteam = 0 + if r.rowerplan == 'basic' and theteam==0: + raise Http404("Not allowed") + if theteam and (theteam.viewing == 'allmembers' or theteam.manager == request.user): workouts = Workout.objects.filter(team=theteam, startdatetime__gte=startdate,