[#7] Restrict access to source admin page

This commit is contained in:
amercader 2013-02-25 13:10:30 +00:00
parent 457b8d5988
commit 93e15dc529
1 changed files with 1 additions and 0 deletions

View File

@ -337,6 +337,7 @@ class ViewController(BaseController):
def admin(self, id): def admin(self, id):
try: try:
context = {'model':model, 'user':c.user} context = {'model':model, 'user':c.user}
p.toolkit.check_access('harvest_source_update', context, {'id': id})
c.harvest_source = get_action('harvest_source_show')(context, {'id':id}) c.harvest_source = get_action('harvest_source_show')(context, {'id':id})
return render('source/admin.html') return render('source/admin.html')
except NotFound: except NotFound: