Yes - restricted to user.is_staff

Suppose I don't trust my staff? I would like to restrict to
user.is_superuser and prevent my staff from messing about with the
site settings.

I seem to have solved it

At the very start of group_settings():

    if not request.user.is_superuser:
        return render_to_response("configuration/need_super.html", {
            }, context_instance=RequestContext(request))

Does the trick and is simple enough that I don't mind the lack of
'superuser_required()'. If I need it in more views, I'll figure out
decorators!

Thanks
Karl

On Sep 11, 10:50 am, "Chris Moffitt" <[EMAIL PROTECTED]> wrote:
> Looking here 
> -http://www.satchmoproject.com/trac/browser/satchmo/trunk/satchmo/conf...
>
> It should already be protected in that only be visible to managers.
>
> Are you seeing something different?
>
> -Chris
>
> On Thu, Sep 11, 2008 at 8:58 AM, kbochert <[EMAIL PROTECTED]> wrote:
>
> > The shop's site_settings page has some important data. How should I
> > hide it from all but the superuser??
>
> > Karl
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Satchmo users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/satchmo-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to