moep/dynamicweb
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Raise 404 for HostingOrder not belonging to user

Browse source
This commit is contained in:
PCoder 2017-12-12 09:38:08 +01:00
parent 6c81ffbdda
commit beefeb62cb
1 changed files with 10 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
hosting/views.py
View file

@ -670,9 +670,16 @@ class OrdersHostingDetailView(LoginRequiredMixin,
permission_required = ['view_hostingorder']
model = HostingOrder
def get_object(self):
return HostingOrder.objects.get(
pk=self.kwargs.get('pk')) if self.kwargs.get('pk') else None
def get_object(self, queryset=None):
try:
hosting_order_obj = HostingOrder.objects.get(
pk=self.kwargs.get('pk')
)
except HostingOrder.DoesNotExist:
hosting_order_obj = None
if not self.request.user.has_perm(hosting_order_obj):
raise Http404
return hosting_order_obj
def get_context_data(self, **kwargs):
# Get context