src/cm/security.py
changeset 355 c926868cf7e6
parent 295 7c40b98f627f
child 449 5387c032df35
--- a/src/cm/security.py	Tue May 31 18:26:38 2011 +0200
+++ b/src/cm/security.py	Mon Jun 06 10:08:10 2011 +0200
@@ -98,7 +98,15 @@
        not has_perm(request, 'can_manage_text', text=text):
         return False
     
-    return (comment.user == request.user and has_perm(request, perm_name, text=text)) 
+    actual_own_user = False
+    from cm.cm_settings import DECORATED_CREATORS
+    if comment.user == request.user:
+      if DECORATED_CREATORS:
+        if request.GET.get('name', None) == comment.get_name():
+          actual_own_user = True
+      else:
+        actual_own_user = True
+    return (actual_own_user and has_perm(request, perm_name, text=text)) 
         
 def is_authenticated(request):
     # We customize this to be able to monkey patch it if needed