Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Contribute to GitLab
Sign in / Register
Toggle navigation
D
douban-api-proxy
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
captainwong
douban-api-proxy
Commits
7561eabe
Commit
7561eabe
authored
Apr 07, 2021
by
Ozzie Isaacs
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Implement Backend to deny editing Guest rights restriction #1938
parent
067fb1b0
Show whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
8 additions
and
0 deletions
+8
-0
admin.py
cps/admin.py
+7
-0
table.js
cps/static/js/table.js
+1
-0
No files found.
cps/admin.py
View file @
7561eabe
...
@@ -335,6 +335,9 @@ def edit_list_user(param):
...
@@ -335,6 +335,9 @@ def edit_list_user(param):
elif
param
==
'kindle_mail'
:
elif
param
==
'kindle_mail'
:
user
.
kindle_mail
=
valid_email
(
vals
[
'value'
])
if
vals
[
'value'
]
else
""
user
.
kindle_mail
=
valid_email
(
vals
[
'value'
])
if
vals
[
'value'
]
else
""
elif
param
==
'role'
:
elif
param
==
'role'
:
if
user
.
name
==
"Guest"
and
int
(
vals
[
'field_index'
])
in
\
[
constants
.
ROLE_ADMIN
,
constants
.
ROLE_PASSWD
,
constants
.
ROLE_EDIT_SHELFS
]:
raise
Exception
(
_
(
"Guest can't have this role"
))
if
vals
[
'value'
]
==
'true'
:
if
vals
[
'value'
]
==
'true'
:
user
.
role
|=
int
(
vals
[
'field_index'
])
user
.
role
|=
int
(
vals
[
'field_index'
])
else
:
else
:
...
@@ -345,6 +348,8 @@ def edit_list_user(param):
...
@@ -345,6 +348,8 @@ def edit_list_user(param):
return
_
(
u"No admin user remaining, can't remove admin role"
,
nick
=
user
.
name
),
400
return
_
(
u"No admin user remaining, can't remove admin role"
,
nick
=
user
.
name
),
400
user
.
role
&=
~
int
(
vals
[
'field_index'
])
user
.
role
&=
~
int
(
vals
[
'field_index'
])
elif
param
==
'sidebar_view'
:
elif
param
==
'sidebar_view'
:
if
user
.
name
==
"Guest"
and
int
(
vals
[
'field_index'
])
==
constants
.
SIDEBAR_READ_AND_UNREAD
:
raise
Exception
(
_
(
"Guest can't have this view"
))
if
vals
[
'value'
]
==
'true'
:
if
vals
[
'value'
]
==
'true'
:
user
.
sidebar_view
|=
int
(
vals
[
'field_index'
])
user
.
sidebar_view
|=
int
(
vals
[
'field_index'
])
else
:
else
:
...
@@ -358,6 +363,8 @@ def edit_list_user(param):
...
@@ -358,6 +363,8 @@ def edit_list_user(param):
elif
param
==
'denied_column_value'
:
elif
param
==
'denied_column_value'
:
user
.
denied_column_value
=
vals
[
'value'
]
user
.
denied_column_value
=
vals
[
'value'
]
elif
param
==
'locale'
:
elif
param
==
'locale'
:
if
user
.
name
==
"Guest"
:
raise
Exception
(
_
(
"Guest's Locale is determined automatically and can't be set"
))
user
.
locale
=
vals
[
'value'
]
user
.
locale
=
vals
[
'value'
]
elif
param
==
'default_language'
:
elif
param
==
'default_language'
:
user
.
default_language
=
vals
[
'value'
]
user
.
default_language
=
vals
[
'value'
]
...
...
cps/static/js/table.js
View file @
7561eabe
...
@@ -459,6 +459,7 @@ $(function() {
...
@@ -459,6 +459,7 @@ $(function() {
$
(
"input[data-name='admin_role'][data-pk='"
+
guest
.
data
(
"pk"
)
+
"']"
).
prop
(
"disabled"
,
true
);
$
(
"input[data-name='admin_role'][data-pk='"
+
guest
.
data
(
"pk"
)
+
"']"
).
prop
(
"disabled"
,
true
);
$
(
"input[data-name='passwd_role'][data-pk='"
+
guest
.
data
(
"pk"
)
+
"']"
).
prop
(
"disabled"
,
true
);
$
(
"input[data-name='passwd_role'][data-pk='"
+
guest
.
data
(
"pk"
)
+
"']"
).
prop
(
"disabled"
,
true
);
$
(
"input[data-name='edit_shelf_role'][data-pk='"
+
guest
.
data
(
"pk"
)
+
"']"
).
prop
(
"disabled"
,
true
);
$
(
"input[data-name='edit_shelf_role'][data-pk='"
+
guest
.
data
(
"pk"
)
+
"']"
).
prop
(
"disabled"
,
true
);
$
(
"input[data-name='sidebar_read_and_unread'][data-pk='"
+
guest
.
data
(
"pk"
)
+
"']"
).
prop
(
"disabled"
,
true
);
// ToDo: Disable delete
// ToDo: Disable delete
},
},
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment