changeset 29:af82335acd58

arnica_slides: requires also POST where delete rights are needed
author Reimar Bauer <rb.proj AT googlemail DOT com>
date Fri, 23 May 2008 23:24:15 +0200
parents e71bbef3a837
children f28165322ad3
files data/plugin/action/arnica_slides.py
diffstat 1 files changed, 2 insertions(+), 3 deletions(-) [+]
line wrap: on
line diff
--- a/data/plugin/action/arnica_slides.py	Fri May 23 22:06:05 2008 +0200
+++ b/data/plugin/action/arnica_slides.py	Fri May 23 23:24:15 2008 +0200
@@ -446,7 +446,7 @@
         elif command == 'BS':
             msg = "gone back"
 
-        elif request.user.may.delete(pagename):
+        elif request.user.may.delete(pagename) and request.request_method == 'POST':
         # only users which are allowed to delete should use this tool
         # ToDo besides lots of refactoring, logig when what is needed has to be rechecked
 
@@ -501,7 +501,6 @@
             self.page.send_page()
 
 def execute(pagename, request):
-    """ Main dispatcher for the arnica_slides action.
-    """
+    """ Main dispatcher for the arnica_slides action. """
     return arnica_slides(request, pagename).render()