summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIsmael Carnales <icarnales@gmail.com>2009-11-10 18:32:47 -0200
committerIsmael Carnales <icarnales@gmail.com>2009-11-10 18:32:47 -0200
commit6a11b8446354c927a27b2d81ed5022fb78fd3eaf (patch)
tree47e3a532b80fc5f28235a7445213a8e931246dda
parentfa27a3927bc85210c9b35daa86dc41e7c982fde2 (diff)
added login_required to protect todolists views
-rw-r--r--todolists/views.py5
1 files changed, 4 insertions, 1 deletions
diff --git a/todolists/views.py b/todolists/views.py
index 8d99bdb4..10d36e15 100644
--- a/todolists/views.py
+++ b/todolists/views.py
@@ -4,7 +4,7 @@ from django.http import HttpResponseRedirect
from django.template import RequestContext
from django.core.mail import send_mail
from django.shortcuts import get_object_or_404, render_to_response
-from django.contrib.auth.decorators import permission_required
+from django.contrib.auth.decorators import login_required, permission_required
from django.views.generic.create_update import delete_object
from django.template import Context, loader
from archweb.main.models import Todolist, TodolistPkg, Package
@@ -27,6 +27,7 @@ class TodoListForm(forms.Form):
return packages
+@login_required
def flag(request, listid, pkgid):
list = get_object_or_404(Todolist, id=listid)
pkg = get_object_or_404(TodolistPkg, id=pkgid)
@@ -34,11 +35,13 @@ def flag(request, listid, pkgid):
pkg.save()
return HttpResponseRedirect('/todo/%s/' % (listid))
+@login_required
def view(request, listid):
list = get_object_or_404(Todolist, id=listid)
return render_to_response('todolists/view.html',
RequestContext(request, {'list':list}))
+@login_required
def list(request):
lists = Todolist.objects.order_by('-date_added')
for l in lists: