From dd925f4a0450e2c196843b7295b6820f3b41fd52 Mon Sep 17 00:00:00 2001 From: Ricky Ramirez Date: Fri, 9 Aug 2013 12:16:24 -0700 Subject: [PATCH] account: Protect employees against logged out users. UnloggedUser raises a NotImplementedError for name. --- r2/r2/models/account.py | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/r2/r2/models/account.py b/r2/r2/models/account.py index 1ea6ae14c..e609691a9 100644 --- a/r2/r2/models/account.py +++ b/r2/r2/models/account.py @@ -637,9 +637,10 @@ class Account(Thing): Being an employee grants them various special privileges. """ - return (self.name in g.admins or - self.name in g.sponsors or - self.name in g.employees) + return (hasattr(self, 'name') and + (self.name in g.admins or + self.name in g.sponsors or + self.name in g.employees)) class FakeAccount(Account): _nodb = True