ag-admin/OpenSlides
0
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Adjust restricter, so poll managers can see the delegation structure

Browse Source
This commit is contained in:
Finn Stutzenstein 2020-12-10 09:20:50 +01:00
parent ec36d4d64e
commit ef42a2293d
No known key found for this signature in database
GPG Key ID: 9042F605C6324654
1 changed files with 17 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
server/openslides/users/access_permissions.py
View File

@ -63,15 +63,26 @@ class UserAccessPermissions(BaseAccessPermissions):
# Check user permissions. # Check user permissions.
if await async_has_perm(user_id, "users.can_see_name"): if await async_has_perm(user_id, "users.can_see_name"):
whitelist_operator = None
if await async_has_perm(user_id, "users.can_see_extra_data"): if await async_has_perm(user_id, "users.can_see_extra_data"):
if await async_has_perm(user_id, "users.can_manage"): if await async_has_perm(user_id, "users.can_manage"):
data = [filtered_data(full, all_data_fields) for full in full_data] whitelist = all_data_fields
else: else:
data = [filtered_data(full, many_data_fields) for full in full_data] whitelist = many_data_fields
else: else:
whitelist = little_data_fields
whitelist_operator = own_data_fields
# for managing {motion, assignment} polls the users needs to know
# the vote delegation structure.
if await async_has_perm(
user_id, "motion.can_manage_polls"
) or await async_has_perm(user_id, "assignments.can_manage"):
whitelist.add("vote_delegated_to_id")
whitelist.add("vote_delegated_from_users_id")
data = [ data = [
filtered_data(full, little_data_fields, own_data_fields) filtered_data(full, whitelist, whitelist_operator) for full in full_data
for full in full_data
] ]
else: else:
# Build a list of users, that can be seen without any permissions (with little fields). # Build a list of users, that can be seen without any permissions (with little fields).