Require finance_show for membership fee view

Currently only shows an empty table with a 403 for users lacking that permission.
agdsn · May 28, 2024 · 377b43a · 377b43a
1 parent 102c75a
commit 377b43a
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/web/blueprints/finance/__init__.py b/web/blueprints/finance/__init__.py
@@ -1368,8 +1368,9 @@ def membership_fee_users_due_json(fee_id: int) -> ResponseReturnValue:
     ).model_dump()
 
 
-@bp.route("/membership_fees", methods=['GET', 'POST'])
-@nav.navigate("Beiträge", icon='fa-hand-holding-usd')
+@bp.route("/membership_fees", methods=["GET", "POST"])
+@nav.navigate("Beiträge", icon="fa-hand-holding-usd")
+@access.require("finance_change")
 def membership_fees() -> ResponseReturnValue:
     table = MembershipFeeTable(data_url=url_for('.membership_fees_json'))
     return render_template('finance/membership_fees.html', table=table)