From e0f381b314d8ba44df92cd222a1d4cc6627748b8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pierre-Elliott=20B=C3=A9cue?= <becue@crans.org>
Date: Fri, 24 Apr 2020 21:16:32 +0200
Subject: [PATCH] Fix an ACL check issue for DownloadStatements

---
 process/views.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/process/views.py b/process/views.py
index 533cbc3..af3b0fc 100644
--- a/process/views.py
+++ b/process/views.py
@@ -511,6 +511,8 @@ class UpdateKeycheck(RequirementMixin, View):
 
 
 class DownloadStatements(VisitProcessMixin, View):
+    require_visit_perms = "view_intent"
+
     def get(self, request, *args, **kw):
         data = self.process.get_statements_as_mbox()
         res = http.HttpResponse(data, content_type="text/plain")
-- 
GitLab