← Back to branch summary

~azzar1/unity/add-show-desktop-key

« back to all changes in this revision

Viewing changes to ivle/webapp/base/views.py

  • Committer: William Grant
  • Date: 2009-12-02 02:20:57 UTC
  • mto: This revision was merged to the branch mainline in revision 1353.
  • Revision ID: grantw@unimelb.edu.au-20091202022057-m3w3rzrzp47y89to
Refuse to traverse through an object to which the user has no permissions. This stops information leakage in breadcrumbs.

Show diffs side-by-side

added added

removed removed

Lines of Context:
ivle/webapp/base/views.py
21
21
    """
22
22
    Abstract base class for all view objects.
23
23
    """
 
24
 
 
25
    subpath_allowed = False
 
26
 
 
27
    def __init__(self, req, context, subpath=None):
 
28
        self.context = context
 
29
        if self.subpath_allowed:
 
30
            self.subpath = subpath
 
31
 
24
32
    def render(self, req):
25
33
        raise NotImplementedError()
26
34