Forgot to import PermissionBackend

apps/activity/views.py

@@ -329,7 +329,7 @@ class ActivityEntryView(LoginRequiredMixin, SingleTableMixin, TemplateView):
         context["noteuser_ctype"] = ContentType.objects.get_for_model(NoteUser).pk
         context["notespecial_ctype"] = ContentType.objects.get_for_model(NoteSpecial).pk
 
-        activities_open = Activity.objects.filter(open=True, activity_type__manage_entries=True).filter(
+        activities_open = Activity.objects.filter(open=True).filter(
             PermissionBackend.filter_queryset(self.request, Activity, "view")).distinct().all()
         context["activities_open"] = [a for a in activities_open
                                       if PermissionBackend.check_perm(self.request,

apps/member/forms.py

@@ -15,6 +15,7 @@ from django.utils.translation import gettext_lazy as _
 from note.models import NoteSpecial, Alias
 from note_kfet.inputs import Autocomplete, AmountInput
 from permission.models import PermissionMask, Role
+from permission.backends import PermissionBackend
 from PIL import Image, ImageSequence
 
 from .models import Profile, Club, Membership
@@ -44,10 +45,10 @@ class ProfileForm(forms.ModelForm):
     """
     A form for the extras field provided by the :model:`member.Profile` model.
     """
-    # Remove widget=forms.HiddenInput() if you want to use report frequency.
-    report_frequency = forms.IntegerField(required=False, initial=0, label=_("Report frequency"))
 
-    last_report = forms.DateTimeField(required=False, disabled=True, label=_("Last report date"))
+    report_frequency = forms.IntegerField(required=False, initial=0, label=_("Statement frequency (in days)"))
+
+    last_report = forms.DateTimeField(required=False, disabled=True, label=_("Last statement date"))
 
     VSS_charter_read = forms.BooleanField(
         required=True,
@@ -67,6 +68,14 @@ class ProfileForm(forms.ModelForm):
         self.fields['address'].widget.attrs.update({"placeholder": "4 avenue des Sciences, 91190 GIF-SUR-YVETTE"})
         self.fields['promotion'].widget.attrs.update({"max": timezone.now().year})
     
+    def clean(self):
+        """Force the values of fields that the user does not have permission to modify.."""
+        cleaned_data = super().clean()
+        for field_name in self.fields.keys():
+            if not PermissionBackend.check_perm(self.request, f"member.change_profile_{field_name}", self.instance):
+                cleaned_data[field_name] = getattr(self.instance, field_name)  # Force the old value
+        return cleaned_data
+
     @transaction.atomic
     def save(self, commit=True):
         if not self.instance.section or (("department" in self.changed_data

apps/member/models.py

@@ -114,12 +114,12 @@ class Profile(models.Model):
     )
 
     report_frequency = models.PositiveSmallIntegerField(
-        verbose_name=_("report frequency (in days)"),
+        verbose_name=_("Statement frequency (in days)"),
         default=0,
     )
 
     last_report = models.DateTimeField(
-        verbose_name=_("last report date"),
+        verbose_name=_("Last statement date"),
         default=timezone.now,
     )
 

apps/member/views.py

@@ -75,21 +75,16 @@ class UserUpdateView(ProtectQuerysetMixin, LoginRequiredMixin, UpdateView):
 
         profile_form = self.profile_form(instance=context['user_object'].profile,
                                          data=self.request.POST if self.request.POST else None)
-
         if not self.object.profile.report_frequency:
             del profile_form.fields["last_report"]
 
         fields_to_check = list(profile_form.fields.keys())
-        fields_modifiable = False
 
         # Delete the fields for which the user does not have the permission to modify
         for field_name in fields_to_check:
             if not PermissionBackend.check_perm(self.request, f"member.change_profile_{field_name}", context['user_object'].profile):
                 profile_form.fields[field_name].widget = forms.HiddenInput()
-            else:
-                fields_modifiable = True
 
-        if fields_modifiable:
         context['profile_form'] = profile_form
 
         return context

apps/permission/fixtures/initial.json

@@ -127,7 +127,7 @@
                 "auth",
                 "user"
             ],
-            "query": "[\"AND\", {\"pk\": [\"user\", \"pk\"]}, {\"memberships__club__parent_club__isnull\": true}]",
+            "query": "{\"pk\": [\"user\", \"pk\"]}",
             "type": "change",
             "mask": 1,
             "field": "last_login",
@@ -3885,15 +3885,19 @@
         "pk": 247,
         "fields": {
             "model": [
-                "activity",
+                "member",
-                "guest"
+                "profile"
             ],
-            "query": "{\"activity__organizer\": [\"club\"]}",
+            "query": "{}",
             "type": "view",
-            "mask": 2,
+            "mask": 3,
-            "field": "",
+            "field": [
+                "ml_events_registration",
+                "ml_art_registration",
+                "ml_sport_registration"
+            ],
             "permanent": false,
-            "description": "Voir les personnes invitées aux événements organisés par son club"
+            "description": "Voir les abonnements aux Newsletters de n'importe quel profil"
         }
     },
     {

locale/fr/LC_MESSAGES/django.po

@@ -794,11 +794,11 @@ msgid "Permission mask"
 msgstr "Masque de permissions"
 
 #: apps/member/forms.py:46
-msgid "Report frequency"
+msgid "Statement frequency (in days)"
 msgstr "Fréquence des relevés (en jours)"
 
 #: apps/member/forms.py:48
-msgid "Last report date"
+msgid "Last statement date"
 msgstr "Date de dernier relevé"
 
 #: apps/member/forms.py:52
@@ -1044,12 +1044,12 @@ msgstr ""
 "artistiques sur le campus (1 mail par semaine)"
 
 #: apps/member/models.py:117
-msgid "report frequency (in days)"
+msgid "Statement frequency (in days)"
-msgstr "fréquence des relevés (en jours)"
+msgstr "Fréquence des relevés (en jours)"
 
 #: apps/member/models.py:122
-msgid "last report date"
+msgid "Last statement date"
-msgstr "date de dernier relevé"
+msgstr "Date de dernier relevé"
 
 #: apps/member/models.py:127
 msgid "email confirmed"