From 5055f54bb12ef6e91e3d7f8e04150eca0b505a32 Mon Sep 17 00:00:00 2001
From: Erin Mullaney <erin.mullaney@torchbox.com>
Date: Tue, 5 Feb 2019 09:07:22 -0500
Subject: [PATCH] #938 move the permissions from BaseAdminSubmissionsTable out
 to the views that inherit it.

---
 opentech/apply/funds/views.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/opentech/apply/funds/views.py b/opentech/apply/funds/views.py
index ba5aa3477..f9f487c6c 100644
--- a/opentech/apply/funds/views.py
+++ b/opentech/apply/funds/views.py
@@ -130,6 +130,7 @@ class BaseReviewerSubmissionsTable(BaseAdminSubmissionsTable):
         return super().get_queryset().reviewed_by(self.request.user)
 
 
+@method_decorator(staff_required, name='dispatch')
 class SubmissionOverviewView(AllActivityContextMixin, BaseAdminSubmissionsTable):
     template_name = 'funds/submissions_overview.html'
     table_class = SummarySubmissionsTable
@@ -157,6 +158,7 @@ class SubmissionOverviewView(AllActivityContextMixin, BaseAdminSubmissionsTable)
         )
 
 
+@method_decorator(staff_required, name='dispatch')
 class SubmissionAdminListView(AllActivityContextMixin, BaseAdminSubmissionsTable):
     template_name = 'funds/submissions.html'
     form_views = [
@@ -173,6 +175,7 @@ class SubmissionListView(ViewDispatcher):
     reviewer_view = SubmissionReviewerListView
 
 
+@method_decorator(staff_required, name='dispatch')
 class SubmissionsByRound(AllActivityContextMixin, BaseAdminSubmissionsTable, DelegateableListView):
     template_name = 'funds/submissions_by_round.html'
     form_views = [
@@ -196,6 +199,7 @@ class SubmissionsByRound(AllActivityContextMixin, BaseAdminSubmissionsTable, Del
         return super().get_context_data(object=self.obj, **kwargs)
 
 
+@method_decorator(staff_required, name='dispatch')
 class SubmissionsByStatus(BaseAdminSubmissionsTable):
     template_name = 'funds/submissions_by_status.html'
     status_mapping = PHASES_MAPPING
-- 
GitLab