imacat/mia-accounting-django
1
0
Fork 0
Code Issues Pull Requests Projects Releases 4 Wiki Activity

Added required_GET and login_required to the views of the user list and user detail in the Mia core application.

Browse Source
This commit is contained in:
依瑪貓
2020-08-09 22:11:02 +08:00
parent d0407d4900
commit 1fbd934e32
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
mia_core/views.py
View File

@@ -23,6 +23,7 @@ from django.contrib.auth import logout as logout_user
from django.contrib.messages.views import SuccessMessageMixin from django.contrib.messages.views import SuccessMessageMixin
from django.http import HttpResponse, JsonResponse from django.http import HttpResponse, JsonResponse
from django.shortcuts import redirect, render from django.shortcuts import redirect, render
from django.utils.decorators import method_decorator
from django.views.decorators.http import require_POST, require_GET from django.views.decorators.http import require_POST, require_GET
from django.views.generic import DeleteView as CoreDeleteView, ListView, \ from django.views.generic import DeleteView as CoreDeleteView, ListView, \
DetailView DetailView
@@ -59,11 +60,15 @@ def logout(request):
return redirect("home") return redirect("home")
@method_decorator(require_GET, name="dispatch")
@method_decorator(login_required, name="dispatch")
class UserListView(ListView): class UserListView(ListView):
"""The view to list the users.""" """The view to list the users."""
queryset = User.objects.order_by("login_id") queryset = User.objects.order_by("login_id")
@method_decorator(require_GET, name="dispatch")
@method_decorator(login_required, name="dispatch")
class UserView(DetailView): class UserView(DetailView):
"""The view of a user.""" """The view of a user."""
def get_object(self, queryset=None): def get_object(self, queryset=None):