Refs django#720 -- Allowed staff users to edit bios and teams.

Author: timgraham

Diff for: members/admin.py

@@ -20,6 +20,11 @@ class IndividualMemberAdmin(MarkdownxModelAdmin):
     ]
     search_fields = ['name']
 
+    def has_change_permission(self, request, obj=None):
+        return request.user.is_staff
+
+    has_module_permission = has_change_permission
+
 
 class InvoiceInline(admin.TabularInline):
     model = Invoice
@@ -106,3 +111,8 @@ def membership_expires(self, obj):
 class TeamAdmin(admin.ModelAdmin):
     filter_horizontal = ['members']
     prepopulated_fields = {'slug': ('name',)}
+
+    def has_change_permission(self, request, obj=None):
+        return request.user.is_staff
+
+    has_module_permission = has_change_permission

Diff for: members/test_admin.py

@@ -1,10 +1,12 @@
 from datetime import date, timedelta
 
 from django.contrib import admin
+from django.contrib.auth.models import User
+from django.http import HttpRequest
 from django.test import TestCase
 
 from .admin import CorporateMemberAdmin, StatusFilter
-from .models import CorporateMember
+from .models import CorporateMember, IndividualMember, Team
 
 
 class CorporateMemberAdminTests(TestCase):
@@ -85,3 +87,37 @@ def get_query_string(self, *args):
                 {'display': 'All', 'query_string': '', 'selected': False},
             ]
         )
+
+
+class IndividualMemberTests(TestCase):
+
+    def test_has_change_permission(self):
+        user = User.objects.create()
+        request = HttpRequest()
+        request.user = user
+        self.assertIs(admin.site._registry[IndividualMember].has_change_permission(request), False)
+        user.is_staff = True
+        self.assertIs(admin.site._registry[IndividualMember].has_change_permission(request), True)
+
+    def test_has_module_permission(self):
+        self.assertEqual(
+            admin.site._registry[IndividualMember].has_change_permission,
+            admin.site._registry[IndividualMember].has_module_permission
+        )
+
+
+class TeamTests(TestCase):
+
+    def test_has_change_permission(self):
+        user = User.objects.create()
+        request = HttpRequest()
+        request.user = user
+        self.assertIs(admin.site._registry[Team].has_change_permission(request), False)
+        user.is_staff = True
+        self.assertIs(admin.site._registry[Team].has_change_permission(request), True)
+
+    def test_has_module_permission(self):
+        self.assertEqual(
+            admin.site._registry[Team].has_change_permission,
+            admin.site._registry[Team].has_module_permission
+        )