4 Commits

Author	SHA1	Message	Date
Chris Hill-Scott	b620b677d3	Have permissions decorators check user signed in ... Rather than force us to write the decorators in a specific order let’s just have one decorator call the other. This should make fewer lines of code, and fewer annoying test failures. It also means that the same way of raising a `401` (through the `current_app` method) is used everywhere.	2019-07-03 09:54:35 +01:00
Leo Hemsted	c724f84c23	change wording of platform admin toggle to positive rather than negative ... CHS Approved Wording 👍 also rename suppress_platform_admin -> disable_platform_admin_view in the backend, as suppress is a kinda weird word.	2019-06-14 15:13:56 +01:00
Leo Hemsted	7b02cb72c6	add option to suppress platform admin temporarily ... so that platform admins (us) can view pages as regular users do easily. Simply adds a flag in the session cookie that overrides the actual platform admin flag on the user model if set. This way it's safe, since this only downgrades existing functionality, so if someone managed to alter it they could only get less permissions, not more. You can change this value from the user profile page if either: * you're a platform admin * the flag is set (to any value) on the cookie. This slightly weird check means that we don't check the underlying `user._platform_admin` flag anywhere in the code, even when toggling the suppression.	2019-06-14 11:59:12 +01:00
Chris Hill-Scott	a1b846e159	Move user model test to model folder ... This is consistent with where tests for other models are kept.	2019-06-05 11:13:41 +01:00