From f7f454a73b0baed62f216d564669244f08a3fd02 Mon Sep 17 00:00:00 2001
From: Jan Szejko <janek37@gmail.com>
Date: Mon, 28 Nov 2016 17:36:42 +0100
Subject: [PATCH] view gallery without logging in

---
 apps/wiki/views.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/wiki/views.py b/apps/wiki/views.py
index 34f02407..fcbdf8bf 100644
--- a/apps/wiki/views.py
+++ b/apps/wiki/views.py
@@ -220,7 +220,9 @@ def gallery(request, directory):
         images = [map_to_url(f) for f in map(smart_unicode, os.listdir(base_dir)) if is_image(f)]
         images.sort()
 
-        if not request.user.is_authenticated():
+        book = Book.objects.get(gallery=directory)
+
+        if not book.public and not request.user.is_authenticated():
             return HttpResponseForbidden("Not authorized.")
 
         return JSONResponse(images)
-- 
2.20.1