Some more simplification

2016-10-25 18:06:55 +02:00
parent 64ece74404
commit 62ac12deff
1 changed files with 1 additions and 4 deletions
--- a/pillar/web/nodes/custom/posts.py
+++ b/pillar/web/nodes/custom/posts.py
@@ -50,10 +50,7 @@ def posts_view(project_id=None, project_url=None, url=None):
        # If post is not published, check that the user is also the author of
        # the post. If not, return 404.
        if post.properties.status != "published":
-            if current_user.is_authenticated:
-                if not post.has_method('PUT'):
-                    abort(403)
-            else:
+            if not (current_user.is_authenticated and post.has_method('PUT')):
                abort(403)

        return render_template(