feat: Allow event owners to delete their own events and admins to delete any event with UI action buttons and confirmation dialog
This commit is contained in:
Binary file not shown.
@@ -29,6 +29,12 @@ class IsAdminOrEventCreator(permissions.BasePermission):
|
||||
def has_object_permission(self, request, view, obj):
|
||||
if request.method in permissions.SAFE_METHODS:
|
||||
return True
|
||||
if not request.user or not request.user.is_authenticated:
|
||||
return False
|
||||
if request.user.is_admin_user or request.user.is_staff or request.user.is_superuser:
|
||||
return True
|
||||
if request.method == 'DELETE':
|
||||
return obj.created_by == request.user
|
||||
return obj.is_user_manager_or_admin(request.user)
|
||||
|
||||
class IsTaskAreaOwnerOrAdmin(permissions.BasePermission):
|
||||
|
||||
Reference in New Issue
Block a user