--- a/src/cm/security.py Thu Jul 11 14:44:02 2013 +0200
+++ b/src/cm/security.py Mon Jul 15 09:13:19 2013 +0200
@@ -41,7 +41,10 @@
assert Permission.objects.get(codename=perm_name)
user = get_request_user(request)
- myself = request.GET.get('name', None)
+ try:
+ myself = request.GET.get('name', None)
+ except AttributeError:
+ myself = None
key = sha1(str((settings.SITE_URL, 'has_perm', (user, myself, text, perm_name)))).hexdigest()
val = cache.get(key)
if val != None:
@@ -88,7 +91,10 @@
# make sure perm exist
assert Permission.objects.get(codename=perm_name)
- myself = request.GET.get('name', None)
+ try:
+ myself = request.GET.get('name', None)
+ except AttributeError:
+ myself = None
key = sha1(str((settings.SITE_URL, 'has_own_perm', (user, myself, text, comment, perm_name)))).hexdigest()
val = cache.get(key)
if val != None:
@@ -124,7 +130,7 @@
actual_own_user = False
if comment.user == request.user:
if DECORATED_CREATORS:
- if request.GET.get('name', None) == comment.get_name():
+ if myself == comment.get_name():
actual_own_user = True
else:
actual_own_user = True
@@ -186,7 +192,10 @@
comments: queryset
"""
user = get_request_user(request)
- myself = request.GET.get('name', None)
+ try:
+ myself = request.GET.get('name', None)
+ except AttributeError:
+ myself = None
key = sha1(str((settings.SITE_URL, 'get_viewable_comments', (user, myself, text, comments)))).hexdigest()
val = cache.get(key)
if val != None: