From 004c9d7861bf2eb089af6d76af29eb7da483e8b6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20Rodrigues?= Date: Thu, 2 Jul 2020 18:02:57 -0300 Subject: [PATCH] =?UTF-8?q?Fix=20#3174=20-=20Altera=20perm.=20visualiza?= =?UTF-8?q?=C3=A7=C3=A3o=20autor=20tram.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- sapl/materia/views.py | 9 ++++++++- sapl/templates/materia/tramitacao_detail.html | 2 +- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/sapl/materia/views.py b/sapl/materia/views.py index 773ca0eaf..f3b63a31e 100644 --- a/sapl/materia/views.py +++ b/sapl/materia/views.py @@ -20,6 +20,7 @@ from django.conf import settings from django.contrib import messages from django.contrib.auth.decorators import permission_required from django.contrib.auth.mixins import PermissionRequiredMixin +from django.contrib.auth.models import Group from django.core.exceptions import ObjectDoesNotExist, MultipleObjectsReturned, ValidationError from django.core.urlresolvers import reverse from django.db.models import Max, Q @@ -1386,7 +1387,13 @@ class TramitacaoCrud(MasterDetailCrud): def get_context_data(self, **kwargs): context = super().get_context_data(**kwargs) - context['user'] = self.request.user + + user = self.request.user + group = Group.objects.get(name="Operador de Matéria") + + user_is_operador_materia = group.user_set.filter(username=user.username).exists() + + context['visible'] = True if user.is_superuser or user_is_operador_materia else False return context diff --git a/sapl/templates/materia/tramitacao_detail.html b/sapl/templates/materia/tramitacao_detail.html index df108ad13..4e5026ed2 100644 --- a/sapl/templates/materia/tramitacao_detail.html +++ b/sapl/templates/materia/tramitacao_detail.html @@ -3,7 +3,7 @@ {% block detail_content %} {{ block.super }} - {% if user.is_superuser %} + {% if visible %}
{% if tramitacao.user %}