diff options
Diffstat (limited to 'app/views/users.py')
| -rw-r--r-- | app/views/users.py | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/app/views/users.py b/app/views/users.py index 62bc6f2..b68c103 100644 --- a/app/views/users.py +++ b/app/views/users.py @@ -49,6 +49,10 @@ def user_profile_page(username): if not user: abort(404) + packages = user.packages.filter_by(soft_deleted=False) + if not current_user.is_authenticated or (user != current_user and not current_user.canAccessTodoList()): + packages = packages.filter_by(approved=True) + form = None if user.checkPerm(current_user, Permission.CHANGE_DNAME) or \ user.checkPerm(current_user, Permission.CHANGE_EMAIL) or \ @@ -92,7 +96,7 @@ def user_profile_page(username): # Process GET or invalid POST return render_template("users/user_profile_page.html", - user=user, form=form) + user=user, form=form, packages=packages) @app.route("/users/claim/", methods=["GET", "POST"]) |