restrict status view to reviewers

This commit is contained in:
Luke Hatcher 2012-08-25 19:52:07 -04:00
parent 86b698a228
commit 1cb22cea95

View file

@ -275,6 +275,9 @@ def review_delete(request, pk):
@login_required @login_required
def review_status(request, section_slug=None, key=None): def review_status(request, section_slug=None, key=None):
if not request.user.has_perm("reviews.can_review_%s" % section_slug):
return access_not_permitted(request)
VOTE_THRESHOLD = settings.SYMPOSION_VOTE_THRESHOLD VOTE_THRESHOLD = settings.SYMPOSION_VOTE_THRESHOLD
ctx = { ctx = {