mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-08-23 07:46:23 -04:00
Merge with master.
This commit is contained in:
@@ -40,9 +40,8 @@ def manage_users(service_id):
|
||||
|
||||
@main.route("/services/<service_id>/users/invite", methods=['GET', 'POST'])
|
||||
@login_required
|
||||
@user_has_permissions('manage_users', 'manage_templates', 'manage_settings')
|
||||
@user_has_permissions('manage_users', admin_override=True)
|
||||
def invite_user(service_id):
|
||||
|
||||
service = get_service_by_id(service_id)
|
||||
|
||||
form = InviteUserForm(current_user.email_address)
|
||||
@@ -50,6 +49,7 @@ def invite_user(service_id):
|
||||
email_address = form.email_address.data
|
||||
permissions = _get_permissions(request.form)
|
||||
invited_user = invite_api_client.create_invite(current_user.id, service_id, email_address, permissions)
|
||||
|
||||
flash('Invite sent to {}'.format(invited_user.email_address), 'default_with_tick')
|
||||
return redirect(url_for('.manage_users', service_id=service_id))
|
||||
|
||||
@@ -63,7 +63,7 @@ def invite_user(service_id):
|
||||
|
||||
@main.route("/services/<service_id>/users/<user_id>", methods=['GET', 'POST'])
|
||||
@login_required
|
||||
@user_has_permissions('manage_users', 'manage_templates', 'manage_settings')
|
||||
@user_has_permissions('manage_users', admin_override=True)
|
||||
def edit_user_permissions(service_id, user_id):
|
||||
# TODO we should probably using the service id here in the get user
|
||||
# call as well. eg. /user/<user_id>?&service_id=service_id
|
||||
@@ -73,11 +73,11 @@ def edit_user_permissions(service_id, user_id):
|
||||
# Do it through the template or the form class?
|
||||
form = PermisisonsForm(**{
|
||||
'send_messages': 'yes' if user.has_permissions(
|
||||
['send_texts', 'send_emails', 'send_letters']) else 'no',
|
||||
permissions=['send_texts', 'send_emails', 'send_letters']) else 'no',
|
||||
'manage_service': 'yes' if user.has_permissions(
|
||||
['manage_users', 'manage_templates', 'manage_settings']) else 'no',
|
||||
permissions=['manage_users', 'manage_templates', 'manage_settings']) else 'no',
|
||||
'manage_api_keys': 'yes' if user.has_permissions(
|
||||
['manage_api_keys', 'access_developer_docs']) else 'no'
|
||||
permissions=['manage_api_keys', 'access_developer_docs']) else 'no'
|
||||
})
|
||||
|
||||
if form.validate_on_submit():
|
||||
@@ -100,7 +100,7 @@ def edit_user_permissions(service_id, user_id):
|
||||
|
||||
|
||||
@main.route("/services/<service_id>/cancel-invited-user/<invited_user_id>", methods=['GET'])
|
||||
@user_has_permissions('manage_users', 'manage_templates', 'manage_settings')
|
||||
@user_has_permissions('manage_users', admin_override=True)
|
||||
def cancel_invited_user(service_id, invited_user_id):
|
||||
invite_api_client.cancel_invited_user(service_id=service_id, invited_user_id=invited_user_id)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user