fix export perms

diff --git a/teleforma/templates/telemeta/users.html b/teleforma/templates/telemeta/users.html
index 110fe9dde4f84a3c096d0afb84fb04ae3161f243..cc7758f57549ea28986bb23afe65ba86d5b04961 100644 (file)
--- a/teleforma/templates/telemeta/users.html
+++ b/teleforma/templates/telemeta/users.html
@@ -25,9 +25,13 @@
 </div>
 
 <div class="desk_course">
+
+{% if user.is_staff %}
 <div style="float:right;">
 <a href="{% url teleforma-users-xls-export %}" class="component_icon button icon_csv">XLS Export</a>
 </div>
+{% endif %}
+
 <div class="course_title">{% trans "Users" %}</div>
  {% if users %}
   {% include "telemeta/inc/user_list.html" %}

diff --git a/teleforma/views.py b/teleforma/views.py
index 557703ea6612c0bfb7e70ab29008442d0b29d91f..298151e3f9e8cf90c7e1eab04d040d6a5d8b94a7 100755 (executable)
--- a/teleforma/views.py
+++ b/teleforma/views.py
@@ -140,6 +140,7 @@ class UsersTrainingView(UsersView):
         trainings = Training.objects.filter(id=self.args[0])
         return User.objects.filter(student__training__in=trainings)
 
+
 class UsersXLSExport(object):
 
     first_row = 1
@@ -173,6 +174,7 @@ class UsersXLSExport(object):
 
             print 'exported: ' + user.first_name + ' ' + user.last_name + ' ' + user.username
 
+    @method_decorator(permission_required('is_superuser'))
     def export(self, request):
         self.book = Workbook()
         self.sheet = self.book.add_sheet('Etudiants')