From: Olivier Larchevêque <olivier.larcheveque@auf.org>
Date: Thu, 12 Apr 2012 16:21:00 +0000 (-0400)
Subject: fix proxy candidat 403
X-Git-Tag: 1.6.5~156^2
X-Git-Url: http://git.auf.org/?p=auf_rh_dae.git;a=commitdiff_plain;h=b44ee2a0a954d73560fff048b5352b1ba08b2426

fix proxy candidat 403
---

diff --git a/project/recrutement/admin.py b/project/recrutement/admin.py
index f1a368a..8825921 100644
--- a/project/recrutement/admin.py
+++ b/project/recrutement/admin.py
@@ -454,7 +454,21 @@ class ProxyCandidatAdmin(CandidatAdmin):
         return False
 
     def has_change_permission(self, request, obj=None):
-        return True
+        user_groupes = request.user.groups.all()
+        if request.user.is_superuser is True or \
+            grp_correspondants_rh_recrutement in user_groupes or \
+            grp_drh_recrutement in user_groupes or \
+            grp_directeurs_bureau_recrutement in user_groupes or \
+            grp_administrateurs_recrutement in user_groupes:
+            return True
+
+        if obj is not None:
+            evaluateur = Evaluateur.objects.get(user=request.user)
+            for e in obj.evaluations.all():
+                if e.evaluateur == evaluateur:
+                    return True
+
+        return False
 
     def get_actions(self, request):
         return None