From: Frédéric Péters <fpeters@0d.be>
Date: Wed, 22 Jul 2020 15:17:53 +0000 (+0200)
Subject: nonstop: check add_track permission for zone settings
X-Git-Tag: v2021~106
X-Git-Url: https://git.0d.be/?p=django-panik-nonstop.git;a=commitdiff_plain;h=d7bf199f859ddaba4ba4ea6b3b20025294601594

nonstop: check add_track permission for zone settings
---

diff --git a/nonstop/views.py b/nonstop/views.py
index 6a58773..bd2081d 100644
--- a/nonstop/views.py
+++ b/nonstop/views.py
@@ -581,6 +581,7 @@ class ZoneSettings(FormView):
         return initial
 
     def form_valid(self, form):
+        assert self.request.user.has_perm('nonstop.add_track')
         zone = Nonstop.objects.get(slug=self.kwargs['slug'])
         zone_settings = zone.nonstopzonesettings_set.first()
         zone.start = form.cleaned_data['start']