Changes in ow/models/workout.py [78af3d1:c9991fed] in OpenWorkouts-current

File:

• ow/models/workout.py (modified) (2 diffs)

ow/models/workout.py

@@ -6 +6 @@
 import gpxpy
 from repoze.folder import Folder
-from pyramid.security import Allow, Deny, Everyone, ALL_PERMISSIONS
+from pyramid.security import Allow, Everyone
 
 from ow.utilities import (
@@ -29 +29 @@
         it (for now). If not, everybody can view it, only admins can edit it.
         """
-        uid = self.__parent__.uid
+        # Default permissions
         permissions = [
-            (Allow, str(uid), 'view'),
-            (Allow, str(uid), 'edit'),
-            (Allow, str(uid), 'delete'),
-            (Deny, Everyone, ALL_PERMISSIONS)
+            (Allow, Everyone, 'view'),
+            (Allow, 'group:admins', 'edit')
         ]
+
+        uid = getattr(self.__parent__, 'uid', None)
+        if uid is not None:
+            # Change permissions in case this workout has an owner
+            permissions = [
+                (Allow, str(uid), 'view'),
+                (Allow, str(uid), 'edit'),
+            ]
         return permissions