[Mpuls-commits] r5712 - base/trunk/mpulsweb/controllers

[scm-commit@wald.intevation.org]

Author: torsten
Date: 2011-12-15 12:37:03 +0100 (Thu, 15 Dec 2011)
New Revision: 5712

Modified:
   base/trunk/mpulsweb/controllers/case.py
Log:
Do additional check on sync-permission


Modified: base/trunk/mpulsweb/controllers/case.py
===================================================================
--- base/trunk/mpulsweb/controllers/case.py	2011-12-15 11:35:58 UTC (rev 5711)
+++ base/trunk/mpulsweb/controllers/case.py	2011-12-15 11:37:03 UTC (rev 5712)
@@ -12,7 +12,7 @@
 from mpulsweb.lib.translation import _, ungettext
 from mpulsweb.lib.base import BaseController, render, session, h
 from mpulsweb.lib.security import checkRole, check_feature
-from mpulsweb.lib.dialogs import checkPrivacyStatement
+from mpulsweb.lib.dialogs import checkPrivacyStatement, checkSyncPermission
 from mpulsweb.lib.validators import SetStandinForm, SetEditorForm, NewCaseForm
 from mpulsweb.lib.export import FormletterExport
 from mpulsweb.lib.anonymize import determineAnonymizedCaseEndPhaseName, \
@@ -42,6 +42,7 @@
 
     @checkRole(('admin', 'cm', 'pt_dlr'))
     @checkPrivacyStatement()
+    @checkSyncPermission()
     def select(self, id, confirmed=0):
         return self.digest(id)
 
@@ -778,6 +779,7 @@
 
     @checkRole('cm')
     @checkPrivacyStatement('keepActive')
+    @checkSyncPermission()
     def keepActive(self, id, confirmed):
         # If logbook is enabled let the user give the reason why he keeps the
         # case active.