CMS/cmsmanage
2
0
Fork 0
Code Issues 9 Pull Requests 5 Actions Projects 1 Releases Activity

Don't allow non-staff users to impersonate other users in event form

Browse Source
This commit is contained in:
Adam Goldsmith 2020-12-24 15:31:43 -05:00
parent e02ba33348
commit 48e5ec1ca3
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
tasks/forms.py
View File

@ -15,3 +15,6 @@ class EventForm(forms.ModelForm):
self.fields['date'].initial = datetime.now() self.fields['date'].initial = datetime.now()
self.fields['user'].initial = user self.fields['user'].initial = user
if not user.is_staff:
print(list(self.fields['user'].choices))
self.fields['user'].choices = [(user.id, user)]