reynir/bornhack-website
1
0
Fork 0
Code Issues Pull requests 1 Releases Wiki Activity

Fix EnsureUserOwnsOrderMixin

Browse source
This commit is contained in:
Víðir Valberg Guðmundsson 2016-05-31 23:30:18 +02:00
parent e56c301a90
commit 94b473b1dd
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
shop/views.py
View file

@ -45,8 +45,9 @@ class EnsureUserOwnsOrderMixin(SingleObjectMixin):
def dispatch(self, request, *args, **kwargs):
# If the user does not own this ticket OR is not staff
if self.get_object().user != request.user or not request.user.is_staff:
raise Http404("Order not found")
if not request.user.is_staff:
if self.get_object().user != request.user:
raise Http404("Order not found")
return super(EnsureUserOwnsOrderMixin, self).dispatch(
request, *args, **kwargs