feat: Allow event owners to delete their own events and admins to delete any event with UI action buttons and confirmation dialog

2026-07-31 11:19:49 +02:00
parent e2b311b634
commit 782d4d72a3
12 changed files with 382 additions and 300 deletions
@@ -29,6 +29,12 @@ class IsAdminOrEventCreator(permissions.BasePermission):
    def has_object_permission(self, request, view, obj):
        if request.method in permissions.SAFE_METHODS:
            return True
+        if not request.user or not request.user.is_authenticated:
+            return False
+        if request.user.is_admin_user or request.user.is_staff or request.user.is_superuser:
+            return True
+        if request.method == 'DELETE':
+            return obj.created_by == request.user
        return obj.is_user_manager_or_admin(request.user)

 class IsTaskAreaOwnerOrAdmin(permissions.BasePermission):