Skip to content

Commit 2548153

Browse files
committed
Fix permission bug, secretaries should be able to request reviews
- Legacy-Id: 12191
1 parent 31931ee commit 2548153

2 files changed

Lines changed: 4 additions & 3 deletions

File tree

ietf/doc/tests_review.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ def test_request_review(self):
4848
review_team = review_req.team
4949

5050
url = urlreverse('ietf.doc.views_review.request_review', kwargs={ "name": doc.name })
51-
login_testing_unauthorized(self, "secretary", url)
51+
login_testing_unauthorized(self, "reviewsecretary", url)
5252

5353
# get
5454
r = self.client.get(url)

ietf/review/utils.py

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,13 +27,14 @@ def can_request_review_of_doc(user, doc):
2727
if not user.is_authenticated():
2828
return False
2929

30-
return is_authorized_in_doc_stream(user, doc)
30+
return (is_authorized_in_doc_stream(user, doc)
31+
or Role.objects.filter(person__user=user, name="secr", group__in=active_review_teams).exists())
3132

3233
def can_manage_review_requests_for_team(user, team, allow_non_team_personnel=True):
3334
if not user.is_authenticated():
3435
return False
3536

36-
return (Role.objects.filter(name__in=["secr", "delegate"], person__user=user, group=team).exists()
37+
return (Role.objects.filter(name="secr", person__user=user, group=team).exists()
3738
or (allow_non_team_personnel and has_role(user, "Secretariat")))
3839

3940
def review_requests_to_list_for_docs(docs):

0 commit comments

Comments
 (0)