check that user has a Role attribute

dimagi · Feb 20, 2014 · bc34240 · bc34240
1 parent e794841
commit bc34240
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/django_prbac/decorators.py b/django_prbac/decorators.py
@@ -29,7 +29,7 @@ def wrapped(request, *args, **kwargs):
             if request.role.has_privilege(privilege):
                 return fn(request, *args, **kwargs)
 
-            if not hasattr(request, 'user'):
+            if not hasattr(request, 'user') or not hasattr(request.user, 'prbac_role'):
                 raise PermissionDenied()
 
             try: