diff options
| author | rubenwardy <rw@rubenwardy.com> | 2018-07-28 14:25:51 +0100 |
|---|---|---|
| committer | rubenwardy <rw@rubenwardy.com> | 2018-07-28 14:25:51 +0100 |
| commit | 901e115a217f45668d3d078559fcd23e4f9c34ac (patch) | |
| tree | 90d09c8e89a4fccae95513eccdae5aabd1befa52 /app/models.py | |
| parent | d4c21660196dcd61e36b8c8ffee7bffae8b1017b (diff) | |
| download | cheatdb-901e115a217f45668d3d078559fcd23e4f9c34ac.tar.xz | |
Prevent trusted users from approving their own packages
Diffstat (limited to 'app/models.py')
| -rw-r--r-- | app/models.py | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/app/models.py b/app/models.py index c402d09..0452009 100644 --- a/app/models.py +++ b/app/models.py @@ -489,12 +489,11 @@ class Package(db.Model): else: return user.rank.atLeast(UserRank.EDITOR) - # Editors can change authors - elif perm == Permission.CHANGE_AUTHOR: + # Editors can change authors and approve new packages + elif perm == Permission.APPROVE_NEW or perm == Permission.CHANGE_AUTHOR: return user.rank.atLeast(UserRank.EDITOR) - elif perm == Permission.APPROVE_NEW or perm == Permission.APPROVE_RELEASE \ - or perm == Permission.APPROVE_SCREENSHOT: + elif perm == Permission.APPROVE_RELEASE or perm == Permission.APPROVE_SCREENSHOT: return user.rank.atLeast(UserRank.TRUSTED_MEMBER if isOwner else UserRank.EDITOR) # Moderators can delete packages |