added missing/incomplete permissions to views

containers/views/employee_views.py

@@ -1,3 +1,4 @@
+from django.contrib.auth.mixins import LoginRequiredMixin, UserPassesTestMixin
 from django.shortcuts import render, redirect
 from django.views import View
 from django.views.generic import ListView
@@ -7,17 +8,11 @@ from common.utils.utils import get_preinfo_by_number, get_container_by_number
 from containers.models import Container
 
 
-class ContainersListView(ListView):
+class ContainersListView(LoginRequiredMixin, ListView):
     template_name = 'employee/containers-list.html'
     model = Container
     context_object_name = 'objects'
-    paginate_by = 20  # Number of containers per page
-    # base_template = 'employee-base.html'
-
-    # def get_context_data(self, **kwargs):
-    #     context = super().get_context_data(**kwargs)
-    #     context['base_template'] = self.base_template
-    #     return context
+    paginate_by = 20
 
     def get_queryset(self):
         queryset = super().get_queryset()
@@ -30,12 +25,15 @@ class ContainersListView(ListView):
         return queryset
 
 
-class ReportContainersUnpaidListView(ListView):
+class ReportContainersUnpaidListView(LoginRequiredMixin, UserPassesTestMixin, ListView):
     template_name = 'employee/unpaid-list.html'
     model = Container
     context_object_name = 'objects'
-    paginate_by = 20  # Number of payments per page
-    # base_template = 'employee-base.html'
+    paginate_by = 20
+
+    def test_func(self):
+        return self.request.user.has_company_perm('can_manage_payments') or self.request.user.is_superuser
+
 
     def get_context_data(self, **kwargs):
         context = super().get_context_data(**kwargs)
@@ -62,7 +60,7 @@ class ReportContainersUnpaidListView(ListView):
         return queryset.order_by('-expedited_on')
 
 
-class ContainerSearchView(View):
+class ContainerSearchView(LoginRequiredMixin, View):
     template_name = 'barrier/container-search.html'  # Single template for all searches
 
     def get(self, request):