sander/rowsandall
Private
Public Access
1
0
Fork 0
Code Activity

Merge branch 'hotfix/v4.25'

Browse Source
This commit is contained in:
Sander Roosendaal
2017-10-13 15:16:40 +02:00
parent e0bb6dcaeb 002f61102b
commit de7751befa
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
rowers/views.py
View File

@@ -5856,7 +5856,9 @@ def workout_workflow_view(request,id):
row = Workout.objects.get(id=id) row = Workout.objects.get(id=id)
except Workout.DoesNotExist: except Workout.DoesNotExist:
raise Http404("Workout doesn't exist") raise Http404("Workout doesn't exist")
if (checkworkoutuser(request.user,row)==False):
raise Http404("You are not allowed to edit this workout")
r = getrower(request.user) r = getrower(request.user)
result = request.user.is_authenticated() and ispromember(request.user) result = request.user.is_authenticated() and ispromember(request.user)
if result: if result: