From fc237fed4e43b9a96d04c58673bc05bd9870c9ed Mon Sep 17 00:00:00 2001 From: Jon Roberts Date: Mon, 17 Apr 2023 16:09:17 -0600 Subject: [PATCH] Change from LoginRequired to DomainPermission --- src/registrar/views/application.py | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/src/registrar/views/application.py b/src/registrar/views/application.py index 8c38b391e..1b15bd1c9 100644 --- a/src/registrar/views/application.py +++ b/src/registrar/views/application.py @@ -14,6 +14,8 @@ from registrar.models import DomainApplication from registrar.utility import StrEnum from registrar.views.utility import StepsHelper +from .utility import DomainPermission + logger = logging.getLogger(__name__) @@ -486,10 +488,14 @@ class ApplicationStatus(generic.DetailView): return context -class ApplicationWithdraw(generic.DetailView, LoginRequiredMixin): +class ApplicationWithdraw(generic.DetailView, DomainPermission): model = DomainApplication template_name = "application_withdraw_confirmation.html" - # The page above will display asking user to confirm if they want to withdraw; + """ The page above will display asking user to confirm if they want to withdraw; + + Note it uses "DomainPermission" from Domain to ensure that the person who + applied only have access to withdraw the request + """ def updatestatus(request, pk): """If user click on withdraw confirm button, it will be updated to withdraw