diff options
Diffstat (limited to 'coip/apps/membership/views.py')
-rw-r--r-- | coip/apps/membership/views.py | 43 |
1 files changed, 12 insertions, 31 deletions
diff --git a/coip/apps/membership/views.py b/coip/apps/membership/views.py index 6a500d9..e479015 100644 --- a/coip/apps/membership/views.py +++ b/coip/apps/membership/views.py @@ -3,37 +3,18 @@ Created on Jun 23, 2010 @author: leifj ''' -from django.contrib.auth.decorators import login_required +from django.shortcuts import get_object_or_404 from coip.apps.membership.models import Membership -from coip.apps.membership.forms import InvitationForm -from django.http import HttpResponseRedirect -from coip.apps.auth.utils import nonce -from coip.multiresponse import respond_to +from coip.multiresponse import render403, respond_to -#@login_required -#def memberships(request,name): -# -# Membership.objects.get(name) +def show(request,id): + membership = get_object_or_404(Membership,pk=id) + name = membership.name + if not name.has_permission(request.user,'r'): + return render403("You do not have permission to view membership information for %s" % (name)) - -@login_required -def invite(request): - user = request.user - if request.method == 'POST': - form = InvitationForm(request.POST) - if form.is_valid(): - email = form.cleaned_data["email"] - expires = form.cleaned_data["expires"] - message = form.cleaned_data["message"] - membership = Membership(inviter=user,email=email,message=message,expires=expires,nonce=nonce()) - membership.save() - membership.send_email() - return HttpResponseRedirect("/membership/id/"+membership.id) - else: - form = InvitationForm({}); - - return respond_to(request,{'text/html': 'apps/invitation/create.html'},{'form': form}) - -def accept(request,nonce): - user = request.user - membership = Membership.objects.get(nonce=nonce)
\ No newline at end of file + return respond_to({'text/html': 'apps/membership/membership.html'}, + {'membership': membership, + 'render': {'edit': name.has_permission(request.user,'w'), + 'delete': name.has_permission(request.user,'d'), + 'disable': name.has_permission(request.user,'d')}})
\ No newline at end of file |