Pending page should require staff access, not superuser
authorMagnus Hagander <magnus@hagander.net>
Sat, 3 Dec 2011 15:49:16 +0000 (16:49 +0100)
committerMagnus Hagander <magnus@hagander.net>
Sat, 3 Dec 2011 15:49:16 +0000 (16:49 +0100)
pgweb/core/views.py

index 536f7c1bbd4ac6d2a34084acdda6e0aca3995e98..6a0a2cd1dd95a0cebbe9e21c07a06fa94cf14082 100644 (file)
@@ -160,7 +160,7 @@ def sync_timestamp(request):
 
 # List of all unapproved objects, for the special admin page
 @login_required
-@user_passes_test(lambda u: u.is_superuser)
+@user_passes_test(lambda u: u.is_staff)
 def admin_pending(request):
        return render_to_response('core/admin_pending.html', {
                        'app_list': get_all_pending_moderations(),