nonstop: check add_track permission for zone settings

diff --git a/nonstop/views.py b/nonstop/views.py
index 6a5877357bc907bb53e9d4929b4e1071d1d8160d..bd2081dccef6c836658fe418dd132fd16b1adc4a 100644 (file)
--- a/nonstop/views.py
+++ b/nonstop/views.py
@@ -581,6 +581,7 @@ class ZoneSettings(FormView):
         return initial
 
     def form_valid(self, form):
+        assert self.request.user.has_perm('nonstop.add_track')
         zone = Nonstop.objects.get(slug=self.kwargs['slug'])
         zone_settings = zone.nonstopzonesettings_set.first()
         zone.start = form.cleaned_data['start']