Changeset 135

Timestamp:

Oct 8, 2007, 2:26:16 AM (17 years ago)

Author:

ecprice

Message:

More stuff.

Location:

trunk/web/templates

Files:

• info.tmpl (modified) (2 diffs)
• main.py (modified) (2 diffs)

trunk/web/templates/info.tmpl

@@ -17 +17 @@
 
 <p>Commands:</p>
-<form action="command">
+<form action="command" action="POST">
   <input type="hidden" name="machine_id" value="$machine.machine_id"/>
   <table>
@@ -60 +60 @@
 #end if
 </p>
-<form action="modify">
+<form action="modify" method="POST">
   <input type="hidden" name="machine_id" value="$machine.machine_id"/>
   <table>

trunk/web/templates/main.py

@@ -42 +42 @@
 
 def haveAccess(user, machine):
-    return True
+    if user.username == 'quentin':
+        return True
+    return machine.owner == user.username
 
 def error(op, user, fields, err):
@@ -269 +271 @@
 
 def listVms(user, fields):
-    machines = Machine.select()
+    machines = [m for m in Machine.select() if haveAccess(user, m)]    
     on = {}
     has_vnc = {}