\r
@user_view('users/subscriptions.html', 'subscriptions', _('subscription settings'), _('subscriptions'), True, tabbed=False)\r
def user_subscriptions(request, user):\r
- if request.method == 'POST':\r
- form = SubscriptionSettingsForm(request.POST)\r
+ if request.method == 'POST': \r
+ form = SubscriptionSettingsForm(data=request.POST, instance=user.subscription_settings)\r
\r
- if 'notswitch' in request.POST:\r
- user.subscription_settings.enable_notifications = not user.subscription_settings.enable_notifications\r
- user.subscription_settings.save()\r
+ if form.is_valid():\r
+ if form.cleaned_data['user'] != user.id:\r
+ return HttpResponseUnauthorized(request)\r
\r
- if user.subscription_settings.enable_notifications:\r
- request.user.message_set.create(message=_('Notifications are now enabled'))\r
- else:\r
- request.user.message_set.create(message=_('Notifications are now disabled'))\r
+ if 'notswitch' in request.POST:\r
+ user.subscription_settings.enable_notifications = not user.subscription_settings.enable_notifications\r
+ user.subscription_settings.save()\r
\r
- form.is_valid()\r
- for k, v in form.cleaned_data.items():\r
- setattr(user.subscription_settings, k, v)\r
+ if user.subscription_settings.enable_notifications:\r
+ request.user.message_set.create(message=_('Notifications are now enabled'))\r
+ else:\r
+ request.user.message_set.create(message=_('Notifications are now disabled'))\r
\r
- user.subscription_settings.save()\r
- request.user.message_set.create(message=_('New subscription settings are now saved'))\r
+ form.save()\r
+ request.user.message_set.create(message=_('New subscription settings are now saved'))\r
+ else:\r
+ print form.errors\r
else:\r
- form = SubscriptionSettingsForm(user.subscription_settings.__dict__)\r
+ form = SubscriptionSettingsForm(instance=user.subscription_settings)\r
\r
notificatons_on = user.subscription_settings.enable_notifications\r
\r