Triplehx3/contentdb
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Restrict changing display name to moderator and above

Browse Source
This commit is contained in:
rubenwardy
2018-05-21 22:31:50 +01:00
parent 0a72a38dd0
commit 4841c66602
3 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/views/users.py
View File

@@ -50,14 +50,16 @@ def user_profile_page(username):
abort(404)
form = None
if user == current_user or user.checkPerm(current_user, Permission.CHANGE_RANK):
if user.checkPerm(current_user, Permission.CHANGE_DNAME) or \
user.checkPerm(current_user, Permission.CHANGE_EMAIL) or \
user.checkPerm(current_user, Permission.CHANGE_RANK):
# Initialize form
form = UserProfileForm(formdata=request.form, obj=user)
# Process valid POST
if request.method=="POST" and form.validate():
# Copy form fields to user_profile fields
if user == current_user:
if user.checkPerm(current_user, Permission.CHANGE_DNAME):
user.display_name = form["display_name"].data
if user.checkPerm(current_user, Permission.CHANGE_RANK):