diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 251ddc3914a09bdcb9b7597ca1151c58911e3fdb..6ab2b30fe7dd1bba5743890c624b8172ab61ce35 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -50,6 +50,7 @@ Changed Fixed ~~~~~ +* The permission check for the dashboard edit page failed when the user had no person assigned. * In some cases, the IFrame for legacy pages was not properly sized for its content. * When accessing the person overview page without a person ID, the avatar image was not displayed properly. * The system tried to send notifications for done background tasks diff --git a/aleksis/core/views.py b/aleksis/core/views.py index ed3a355ff657b037dab9c88a32e38ac760c8c7ee..8cf952ae765321aef2545e64b19af2e28f1d39a1 100644 --- a/aleksis/core/views.py +++ b/aleksis/core/views.py @@ -971,7 +971,7 @@ class EditDashboardView(PermissionRequiredMixin, View): if ( self.default_dashboard and not request.user.has_perm("core.edit_default_dashboard_rule") - or getattr(request.user.person, "is_dummy", False) + or getattr(request.user, "person", True) and getattr(request.user.person, "is_dummy", False) ): raise PermissionDenied()