From 114572dac2c78cd235a6b99dc03e6d95d50ae27b Mon Sep 17 00:00:00 2001
From: Brian Wiborg <baccenfutter@c-base.org>
Date: Sun, 24 Nov 2013 19:01:32 +0100
Subject: [PATCH] better aproach of limiting a view to c-lab group

---
 account/views.py | 2 +-
 cbmi/settings.py | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/account/views.py b/account/views.py
index 4c335e2..8e77ee0 100644
--- a/account/views.py
+++ b/account/views.py
@@ -141,7 +141,7 @@ def gastropin(request):
 
 @login_required
 def clabpin(request):
-    if request.user.groups.filter(name='cey-c-lab').count() == 0:
+    if not request.user.is_clab_member:
         return render(request, 'access_denied.html')
 
     def calculate_clab_hash(pin):
diff --git a/cbmi/settings.py b/cbmi/settings.py
index 60fd668..848a62b 100644
--- a/cbmi/settings.py
+++ b/cbmi/settings.py
@@ -141,6 +141,7 @@ AUTH_LDAP_GROUP_TYPE = GroupOfNamesType(name_attr="cn")
 AUTH_LDAP_USER_FLAGS_BY_GROUP = {
     "is_member": "cn=crew,ou=groups,dc=c-base,dc=org",
     "is_circle_member": "cn=circle,ou=groups,dc=c-base,dc=org",
+    "is_clab_member": "cn=cey-c-lab,ou=groups,dc=c-base,dc=org",
 }
 
 AUTH_LDAP_USER_ATTR_MAP = {