fix: fix close auction view

LucasFASouza · Feb 3, 2023 · 857643e · 857643e
1 parent 3ab8f81
commit 857643e
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 16 deletions.
diff --git a/auctions/templates/auctions/listing.html b/auctions/templates/auctions/listing.html
@@ -29,19 +29,26 @@ <h2>Place bid</h2>
             {{ bid_form }}
             <input type="submit" name="bid">
         </form>
-    {% endif %}
 
-    <h2>Comments</h2>
-    <form action="{% url 'listing' listing.id %}" method="post">
-        {% csrf_token %}
-        {{ comment_form }}
-        <input type="submit" name="comment">
-    </form>
-    <ul>
-        {% for comment in comments %}
-            <li>{{ comment }}</li>
-        {% endfor %}
-    </ul>
+        <h2>Comments</h2>
+        <form action="{% url 'listing' listing.id %}" method="post">
+            {% csrf_token %}
+            {{ comment_form }}
+            <input type="submit" name="comment">
+        </form>
+        <ul>
+            {% for comment in comments %}
+                <li>{{ comment }}</li>
+            {% endfor %}
+        </ul>
+    {% else %}
+        <h2>Comments</h2>
+        <ul>
+            {% for comment in comments %}
+                <li>{{ comment }}</li>
+            {% endfor %}
+        </ul>
+    {% endif %}
 
     <h2>Bidings</h2>
     <ul>

diff --git a/auctions/views.py b/auctions/views.py
@@ -138,9 +138,12 @@ def add_listing(request):
 
 
 @login_required
-def close_auction(listing_id):
+def close_auction(request, listing_id):
     auction = Listing.objects.get(id=listing_id)
-    auction.active = False
-    auction.save()
+    user = request.user
 
-    return HttpResponseRedirect(reverse("index"))
+    if user.is_authenticated and auction.seller == user:
+        auction.active = False
+        auction.save()
+
+    return HttpResponseRedirect(reverse("listing", kwargs={'listing_id': listing_id}))