[UPDT] HORILLA VIEWS: Permission in the GenericDeleteConfirmation

JVKeller · Jan 30, 2025 · cc45e33 · cc45e33
1 parent af3fbcb
commit cc45e33
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/horilla_views/views.py b/horilla_views/views.py
@@ -551,8 +551,15 @@ def post(self, *args, **kwargs):
 
         def delete_callback(instance, protected=False):
             try:
-                instance.delete()
-                messages.success(self.request, f"Deleted {instance}")
+                if self.request.user.has_perm(
+                    f"{instance._meta.app_label}.delete_{instance._meta.model.__name__.lower()}"
+                ):
+                    instance.delete()
+                    messages.success(self.request, f"Deleted {instance}")
+                else:
+                    messages.info(
+                        self.request, f"You don't have permission to delete {instance}"
+                    )
             except:
                 messages.error(self.request, f"Cannot delete : {instance}")