From: Jan Szejko <janek37@gmail.com>
Date: Tue, 23 May 2017 13:50:11 +0000 (+0200)
Subject: allow download xml for non-public books (tmp?)
X-Git-Url: https://git.mdrn.pl/redakcja.git/commitdiff_plain/d8990e1ab64fe3bf453d06fab8e983d25f2df2c4?ds=inline;hp=2295af1947e8fe5777120462ea174ec1b044ebdb

allow download xml for non-public books (tmp?)
---

diff --git a/apps/catalogue/views.py b/apps/catalogue/views.py
index e71b3495..c6ae4197 100644
--- a/apps/catalogue/views.py
+++ b/apps/catalogue/views.py
@@ -205,9 +205,7 @@ def upload(request):
 
 
 def serve_xml(request, book, slug):
-    if not book.accessible(request):
-        return HttpResponseForbidden("Not authorized.")
-    xml = book.materialize()
+    xml = book.materialize(publishable=True)
     response = http.HttpResponse(xml, content_type='application/xml')
     response['Content-Disposition'] = 'attachment; filename=%s.xml' % slug
     return response
@@ -216,11 +214,14 @@ def serve_xml(request, book, slug):
 @never_cache
 def book_xml(request, slug):
     book = get_object_or_404(Book, slug=slug)
+    if not book.accessible(request):
+        return HttpResponseForbidden("Not authorized.")
     return serve_xml(request, book, slug)
 
 
 @never_cache
 def book_xml_dc(request, slug):
+    # no permission check, because non-public books
     book = get_object_or_404(Book, dc_slug=slug)
     return serve_xml(request, book, slug)