Require editbugs permission to edit bugs. Patch from j@oil21.org.

diff --git a/Bugs-Everywhere-Web/beweb/controllers.py b/Bugs-Everywhere-Web/beweb/controllers.py
index 8def76c8fb770870f6f89b6cba3fd6b4ac2f4693..e3d555b70662f80703fad46b7d229765dd1addda 100644 (file)
--- a/Bugs-Everywhere-Web/beweb/controllers.py
+++ b/Bugs-Everywhere-Web/beweb/controllers.py
@@ -52,6 +52,7 @@ class Comment(PrestHandler):
         raise cherrypy.HTTPRedirect(comment_url(comment=reply_comment.uuid, 
                                     **reply_data))
 
+    @identity.require( identity.has_permission("editbugs"))
     @provide_action("action", "Update")
     def update(self, comment_data, comment, comment_body, *args, **kwargs):
         comment.body = comment_body