search

shivsharma07 / django-survey

Automatically exported from code.google.com/p/django-survey
0 stars 0 forks source link

Non-staff can #42

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
While there is a @login_required decorator on survey_add, it allows *any*
logged in user to create new surveys, rather than just users with is_staff
or higher. Might be better to use has_perms for this so we can control
which users or groups can create surveys from the django admin.

What version of the product are you using? 
r103

Original issue reported on code.google.com by scotfhac...@gmail.com on 12 Mar 2009 at 6:35