diff --git a/dump.rdb b/dump.rdb index 1cc37bb..10f0b79 100644 Binary files a/dump.rdb and b/dump.rdb differ diff --git a/users/templates/users/userlog_forbidden.html b/users/templates/users/userlog_forbidden.html new file mode 100644 index 0000000..8e741e4 --- /dev/null +++ b/users/templates/users/userlog_forbidden.html @@ -0,0 +1,10 @@ +{% extends "users/base.html" %} +{% load counter_tag %} +{% block content %} +
+

Anmeldelog

+Hier sehen Sie eine Auflistung Ihrer letzten 50 Anmeldevorgänge. +
+Diese Daten dürfen Sie nicht einsehen. +
+{% endblock %} \ No newline at end of file diff --git a/users/views.py b/users/views.py index 4d7b33f..fd07314 100644 --- a/users/views.py +++ b/users/views.py @@ -644,21 +644,25 @@ from auditlog.models import LogEntry @login_required def showUserLog(request, pk): - logdata = LogEntry.objects.filter(object_pk=request.user.pk)[:50] + if (request.user.pk == pk): + logdata = LogEntry.objects.filter(object_pk=request.user.pk)[:50] - logdata_logins = [] + logdata_logins = [] - for ele in logdata: + for ele in logdata: - datestring = json.loads(ele.changes)["last_login"][1] + datestring = json.loads(ele.changes)["last_login"][1] - datestring = datestring.split(".")[0] - logdata_logins.append(datetime.strptime(datestring, '%Y-%m-%d %H:%M:%S')) + datestring = datestring.split(".")[0] + logdata_logins.append(datetime.strptime(datestring, '%Y-%m-%d %H:%M:%S')) - context = { - 'logdata' : logdata_logins - } - return render(request, 'users/userlog.html', context) + context = { + 'logdata' : logdata_logins + } + return render(request, 'users/userlog.html', context) + else: + context = {} + return render(request, 'users/userlog_forbidden.html', context) @login_required def dashboard(request):