Skip to content

Commit

Permalink
Correctly check for permissions on user owned petitions for transferr…
Browse files Browse the repository at this point in the history
…ing petitions
  • Loading branch information
fallen committed Jun 10, 2020
1 parent 9785fcb commit c99d961
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions pytition/petition/views.py
Original file line number Diff line number Diff line change
Expand Up @@ -1623,6 +1623,9 @@ def transfer_petition(request, petition_id):
messages.error(request, _("You don't have the permission to transfer a petition from Organization '{}'"
.format(petition.owner)))
return redirect("org_dashboard", petition.owner)
elif petition.owner_type == "user" and petition.user != pytitionuser:
messages.error(request, _("You don't have the permission to transfer this petition"))
return redirect("user_dashboard")

if petition.owner_type == "org":
ctx['base_template'] = 'petition/org_base.html'
Expand Down

0 comments on commit c99d961

Please sign in to comment.