File tree 1 file changed +11
-6
lines changed
1 file changed +11
-6
lines changed Original file line number Diff line number Diff line change 6
6
7
7
from django .shortcuts import get_object_or_404
8
8
from django .views .generic import ListView , DetailView
9
- from django .http import HttpResponsePermanentRedirect , HttpResponseRedirect
10
- from django .conf import settings
9
+ from django .http import (
10
+ HttpResponseForbidden ,
11
+ HttpResponsePermanentRedirect ,
12
+ HttpResponseRedirect ,
13
+ )
11
14
from django .contrib .auth .decorators import login_required
15
+ from readthedocs .core .permissions import AdminPermission
12
16
from django .core .urlresolvers import reverse
13
17
from django .utils .decorators import method_decorator
14
18
@@ -38,10 +42,11 @@ class BuildTriggerMixin(object):
38
42
39
43
@method_decorator (login_required )
40
44
def post (self , request , project_slug ):
41
- project = get_object_or_404 (
42
- Project .objects .for_admin_user (self .request .user ),
43
- slug = project_slug
44
- )
45
+ project = get_object_or_404 (Project , slug = project_slug )
46
+
47
+ if not AdminPermission .is_admin (request .user , project ):
48
+ return HttpResponseForbidden ()
49
+
45
50
version_slug = request .POST .get ('version_slug' )
46
51
version = get_object_or_404 (
47
52
Version ,
You can’t perform that action at this time.
0 commit comments