-
Notifications
You must be signed in to change notification settings - Fork 133
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ensure user is either an Admin or Manager before allowing submission reviews #1864
Conversation
b60bb50
to
89ad7a8
Compare
return OwnerRole.user_has_role( | ||
user, xform) or ManagerRole.user_has_role(user, xform) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should project managers still be able to create, update & delete submission reviews?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, I think so.
89ad7a8
to
846facd
Compare
return OwnerRole.user_has_role( | ||
user, xform) or ManagerRole.user_has_role(user, xform) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes, I think so.
846facd
to
acb77f4
Compare
# Editors should not be able to create, update, delete | ||
# reviews. Only Admins and Managers should have these permissions | ||
EditorRole.add(self.user, form) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The irony of the role title and the update
functionality 😄
Changes / Features implemented
SubmissionReview
model.Steps taken to verify this change does what is intended
Side effects of implementing this change
Closes #1866