Merge remote-tracking branch 'origin/production'

[wolnelektury.git] / apps / social / views.py

diff --git a/apps/social/views.py b/apps/social/views.py
index 27769d7..e5a8270 100644 (file)
--- a/apps/social/views.py
+++ b/apps/social/views.py
@@ -5,15 +5,11 @@
 from django.shortcuts import render, get_object_or_404, redirect
 from django.http import HttpResponseForbidden
 from django.contrib.auth.decorators import login_required
 from django.shortcuts import render, get_object_or_404, redirect
 from django.http import HttpResponseForbidden
 from django.contrib.auth.decorators import login_required

-#~ from django.utils.datastructures import SortedDict

 from django.views.decorators.http import require_POST
 from django.views.decorators.http import require_POST

-#~ from django.contrib import auth
-#~ from django.views.decorators import cache
-from django.utils.translation import ugettext as _

 
 

-from ajaxable.utils import LazyEncoder, JSONResponse, AjaxableFormView
+from ajaxable.utils import JSONResponse, AjaxableFormView

 
 

-from catalogue.models import Book, Tag
+from catalogue.models import Book

 from social import forms
 from social.utils import get_set, likes, set_sets
 
 from social import forms
 from social.utils import get_set, likes, set_sets
 


@@ -61,7 +57,10 @@ class ObjectSetsFormView(AjaxableFormView):
         return (obj, request.user), {}
 
 
         return (obj, request.user), {}
 
 

+@require_POST

 def unlike_book(request, slug):
 def unlike_book(request, slug):

+    if not request.user.is_authenticated():
+        return HttpResponseForbidden('Login required.')

     book = get_object_or_404(Book, slug=slug)
     if likes(request.user, book):
         set_sets(request.user, book, [])
     book = get_object_or_404(Book, slug=slug)
     if likes(request.user, book):
         set_sets(request.user, book, [])