Person List: only admin user can access autocomplete url

diff --git a/app/organization/network/urls.py b/app/organization/network/urls.py
index b14117645bb89d30589476ab8bd0a063ae7ff3a7..25bc3cb2b65fc6109bfedd0fec0bfffe0ad155a1 100644 (file)
--- a/app/organization/network/urls.py
+++ b/app/organization/network/urls.py
@@ -3,7 +3,7 @@ from __future__ import unicode_literals
 import django.views.i18n
 from django.conf.urls import patterns, include, url
 from django.conf.urls.i18n import i18n_patterns
-
+from django.contrib.auth.decorators import permission_required
 from mezzanine.core.views import direct_to_template
 from mezzanine.conf import settings
 
@@ -13,6 +13,6 @@ from organization.network.views import *
 urlpatterns = [
     url(r'^(?P<department>.*)/teams/$', TeamListView.as_view(), name="organization-network-team-list"),
     url(r'^person/(?P<slug>.*)/$', PersonDetailView.as_view(), name="organization-network-person-detail"),
-    url("^person-list-block-autocomplete/$", PersonListBlockAutocompleteView.as_view(), name='person-list-block-autocomplete'),
-    url("^person-autocomplete/$", PersonListView.as_view(), name='person-autocomplete'),
+    url("^person-list-block-autocomplete/$", permission_required('person.can_edit')(PersonListBlockAutocompleteView.as_view()), name='person-list-block-autocomplete'),
+    url("^person-autocomplete/$", permission_required('person.can_edit')(PersonListView.as_view()), name='person-autocomplete'),
     ]

diff --git a/app/organization/network/views.py b/app/organization/network/views.py
index 16233caefcbc483c4f053ce8f1c0f8864f28037a..e2d958989fb9ea3f53ac85d6af976daacf13389b 100644 (file)
--- a/app/organization/network/views.py
+++ b/app/organization/network/views.py
@@ -84,8 +84,6 @@ class PersonListBlockAutocompleteView(autocomplete.Select2QuerySetView):
 class PersonListView(autocomplete.Select2QuerySetView):
 
     def get_queryset(self):
-        # if not self.request.is_authenticated():
-        #     return PersonListBlock.objects.none()
 
         qs = Person.objects.all()
 

diff --git a/app/organization/pages/urls.py b/app/organization/pages/urls.py
index 12d58fad7b9ae97cd0a1ea876debbbf682794009..711bbf53043888a1d8932796355c6a733e2dbb32 100644 (file)
--- a/app/organization/pages/urls.py
+++ b/app/organization/pages/urls.py
@@ -3,7 +3,7 @@ from __future__ import unicode_literals
 from django.conf.urls import patterns, include, url
 from django.conf.urls.i18n import i18n_patterns
 from django.contrib import admin
-
+from django.contrib.auth.decorators import permission_required
 from mezzanine.core.views import direct_to_template
 from mezzanine.conf import settings
 from organization.pages.views import *
@@ -12,8 +12,8 @@ _slash = "/" if settings.APPEND_SLASH else ""
 
 urlpatterns = [
     url("^$", HomeView.as_view(), name="home"),
-    url("^dynamic-content-home-slider/$", DynamicContentHomeSliderView.as_view(), name='dynamic-content-home-slider'),
-    url("^dynamic-content-home-body/$", DynamicContentHomeBodyView.as_view(), name='dynamic-content-home-body'),
+    url("^dynamic-content-home-slider/$", permission_required('home.can_edit')(DynamicContentHomeSliderView.as_view()), name='dynamic-content-home-slider'),
+    url("^dynamic-content-home-body/$",  permission_required('home.can_edit')(DynamicContentHomeBodyView.as_view()), name='dynamic-content-home-body'),
     url("^home/$", HomeView.as_view(), name='organization-home'),
 
 ]

diff --git a/app/organization/pages/views.py b/app/organization/pages/views.py
index 387c51f5751705da28a25ecb2aee98e3ebd246f7..eb14813d7bd7ca40ebe083d1c6e8fbf911f4bf31 100644 (file)
--- a/app/organization/pages/views.py
+++ b/app/organization/pages/views.py
@@ -1,5 +1,7 @@
 from django.shortcuts import render
 from django.views.generic import DetailView, ListView, TemplateView
+from django.contrib.auth.decorators import login_required
+from django.utils.decorators import method_decorator
 from dal import autocomplete
 from dal_select2_queryset_sequence.views import Select2QuerySetSequenceView
 from django.core.urlresolvers import reverse, reverse_lazy
@@ -31,6 +33,7 @@ class HomeView(SlugMixin, ListView):
 
 
 class DynamicContentHomeSliderView(Select2QuerySetSequenceView):
+
     def get_queryset(self):
 
         articles = Article.objects.all()
@@ -56,6 +59,7 @@ class DynamicContentHomeSliderView(Select2QuerySetSequenceView):
 
 
 class DynamicContentHomeBodyView(Select2QuerySetSequenceView):
+
     def get_queryset(self):
 
         articles = Article.objects.all()