Create new permission groups and fix member register permissions

members/views/members.py

@@ -27,7 +27,7 @@ from members.views.utils import *
 
 @ensure_csrf_cookie
 @require_http_methods(["GET"])
-@permission_required('members.change_member', login_url='/login')
+@permission_required('members.read_member', login_url='/login', raise_exception=True)
 def member_list(request, *args, **kwargs):
     """Render members list."""
     search = request.GET.get('q', None)
@@ -53,7 +53,7 @@ def member_list(request, *args, **kwargs):
 
 @ensure_csrf_cookie
 @require_http_methods(["GET"])
-@permission_required('members.change_member', login_url='/login')
+@permission_required('members.add_member', login_url='/login', raise_exception=True)
 def member_add(request, *args, **kwargs):
     """Render add member page."""
     form = MemberForm()
@@ -62,7 +62,7 @@ def member_add(request, *args, **kwargs):
 
 @ensure_csrf_cookie
 @require_http_methods(["GET"])
-@permission_required('members.change_member', login_url='/login')
+@permission_required('members.delete_member', login_url='/login', raise_exception=True)
 def member_delete_confirm(request, *args, **kwargs):
     """Render member deletion confirmation page."""
     i = kwargs.pop('index', None)
@@ -78,7 +78,7 @@ def member_delete_confirm(request, *args, **kwargs):
 
 @ensure_csrf_cookie
 @require_http_methods(["GET"])
-@permission_required('members.change_member', login_url='/login')
+@permission_required('members.add_member', login_url='/login', raise_exception=True)
 def member_add_many(request, *args, **kwargs):
     """Render add multiple members page."""
     return render(request, 'member_add_many.html', {})
@@ -86,7 +86,7 @@ def member_add_many(request, *args, **kwargs):
 
 @ensure_csrf_cookie
 @require_http_methods(["POST"])
-@permission_required('members.change_member', login_url='/login')
+@permission_required('members.add_member', login_url='/login', raise_exception=True)
 def add_many_confirm(request, *args, **kwargs):
     models = request.session['models']
 
@@ -108,7 +108,7 @@ def add_many_confirm(request, *args, **kwargs):
 
 @ensure_csrf_cookie
 @require_http_methods(["POST"])
-@permission_required('members.change_member', login_url='/login')
+@permission_required('members.add_member', login_url='/login', raise_exception=True)
 def member_submit(request, *args, **kwargs):
     """Add member based on data gained from member form."""
     form = MemberForm(request.POST)
@@ -128,7 +128,7 @@ def member_submit(request, *args, **kwargs):
 
 @ensure_csrf_cookie
 @require_http_methods(["POST"])
-@permission_required('members.change_member', login_url='/login')
+@permission_required('members.change_member', login_url='/login', raise_exception=True)
 def member_update(request, *args, **kwargs):
     """Update member information."""
     form = MemberForm(request.POST)
@@ -154,7 +154,7 @@ def member_update(request, *args, **kwargs):
 
 @ensure_csrf_cookie
 @require_http_methods(["POST"])
-@permission_required('members.change_member', login_url='/login')
+@permission_required('members.delete_member', login_url='/login', raise_exception=True)
 def member_delete(request, *args, **kwargs):
     """Delete member."""
     try:
@@ -181,7 +181,7 @@ def member_delete(request, *args, **kwargs):
 
 @ensure_csrf_cookie
 @require_http_methods(["GET"])
-@permission_required('members.change_member', login_url='/login')
+@permission_required('members.change_member', login_url='/login', raise_exception=True)
 def member_edit(request, *args, **kwargs):
     """Edit member information."""
     i = kwargs.pop('index', None)