Close #33
This commit is contained in:
parent
b73158debc
commit
461d667f59
|
@ -69,6 +69,9 @@ def profile_update(request, profileid):
|
||||||
|
|
||||||
profile = get_object_or_404(Profile, pk=profileid)
|
profile = get_object_or_404(Profile, pk=profileid)
|
||||||
|
|
||||||
|
if profile.user != request.user:
|
||||||
|
raise PermissionDenied("Permission denied : you don't have the permission to update this profile.")
|
||||||
|
|
||||||
if request.method == "POST":
|
if request.method == "POST":
|
||||||
form = ProfileForm(request.POST, instance=profile)
|
form = ProfileForm(request.POST, instance=profile)
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue