From b38f73a583779a0e2312a52bce20315325cae0f1 Mon Sep 17 00:00:00 2001
From: Kálmán Viktor <kviktor@cloud.bme.hu>
Date: Tue, 22 Apr 2014 14:29:03 +0200
Subject: [PATCH] dashboard: acl for interface delete
---
circle/dashboard/views.py | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/circle/dashboard/views.py b/circle/dashboard/views.py
index 27c0901..8fdb043 100644
--- a/circle/dashboard/views.py
+++ b/circle/dashboard/views.py
@@ -2269,8 +2269,11 @@ class InterfaceDeleteView(DeleteView):
def delete(self, request, *args, **kwargs):
self.object = self.get_object()
-
instance = self.object.instance
+
+ if not instance.has_level(request.user, 'operator'):
+ raise PermissionDenied()
+
instance.remove_interface(interface=self.object, user=request.user)
success_url = self.get_success_url()
success_message = _("Interface successfully deleted!")
--
libgit2 0.26.0