From c21a77c40cc1389fe01d741f34ca202f13bf515a Mon Sep 17 00:00:00 2001
From: Brian Moe <brian.moe@ligo.org>
Date: Wed, 22 Jul 2009 11:43:52 -0500
Subject: [PATCH] Allow follow up users to log/upload to any event. Note that
authorized followup user names are hardcoded into views.py
---
gracedb/views.py | 12 ++++++++----
1 file changed, 8 insertions(+), 4 deletions(-)
diff --git a/gracedb/views.py b/gracedb/views.py
index e34c5b554..5c2f2de87 100644
--- a/gracedb/views.py
+++ b/gracedb/views.py
@@ -14,6 +14,8 @@ from translator import handle_uploaded_data
import os
+FOLLOWUP_USER_NAMES = ['LUMIN']
+
def index(request):
# assert request.ligouser
return render_to_response(
@@ -120,8 +122,9 @@ def upload(request):
msg = "ERROR: missing arg(s)"
elif not event:
msg = "ERROR: Event '%s' does not exist" % graceid
- elif event.submitter != request.ligouser:
- msg = "ERROR: Only submitter can upload files"
+ elif event.submitter != request.ligouser and \
+ request.ligouser.name not in FOLLOWUP_USER_NAMES:
+ msg = "ERROR: Only submitter or authorized follow-ups can upload files"
else:
#event issuer comment
log = EventLog(event=event,
@@ -160,8 +163,9 @@ def log(request):
msg = "ERROR: missing arg(s)"
elif not event:
msg = "ERROR: Event '%s' does not exist" % graceid
- elif event.submitter != request.ligouser:
- msg = "ERROR: Only submitter can add log messages"
+ elif event.submitter != request.ligouser and \
+ request.ligouser.name not in FOLLOWUP_USER_NAMES:
+ msg = "ERROR: Only submitter or authorized follow-ups can log messages"
else:
#event issuer comment
log = EventLog(event=event, issuer=request.ligouser, comment=message)
--
GitLab