zydronium/manage.get.gov
1
0
Fork 0
mirror of https://github.com/cisagov/manage.get.gov.git synced 2025-07-20 01:36:00 +02:00
Code Issues Projects Releases Packages Wiki Activity

Update mixins.py

Browse source
This commit is contained in:
zandercymatics 2024-01-04 12:52:49 -07:00
parent 1710c902da
commit b0d05dd5df
No known key found for this signature in database
GPG key ID: FF4636ABEC9682B7
1 changed files with 17 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

21
src/registrar/views/utility/mixins.py
View file

@ -300,13 +300,26 @@ class UserDomainRolePermission(PermissionsLoginMixin):
domain_pk = self.kwargs["pk"]
user_pk = self.kwargs["user_pk"]
# Check if the user is authenticated
if not self.request.user.is_authenticated:
return False
# TODO - exclude the creator from this
if not UserDomainRole.objects.filter(
user=user_pk, domain=domain_pk
).exists():
# Check if the UserDomainRole object exists, then check
# if the user requesting the delete has permissions to do so
has_delete_permission = UserDomainRole.objects.filter(
user=user_pk,
domain=domain_pk,
domain__permissions__user=self.request.user,
).exists()
if not has_delete_permission:
return False
# Check if more than one manager exists on the domain.
# If only one exists, prevent this from happening
has_multiple_managers = len(UserDomainRole.objects.filter(
domain=domain_pk
)) > 1
if not has_multiple_managers:
return False
return True