Fix 500 in account.decorators.group_required for anonymous user

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>

diff --git a/xnet/accounts/decorators.py b/xnet/accounts/decorators.py
index ec2a8df..4e94ef2 100644 (file)
--- a/xnet/accounts/decorators.py
+++ b/xnet/accounts/decorators.py
@@ -48,6 +48,8 @@ class group_required(object):
         @functools.wraps(view_func)
         def wrapped_view_func(request, group_slug, *args, **kwargs):
             group = get_object_or_404(XGroup, short=group_slug)
+            if not request.user.is_authenticated():
+                return HttpResponseForbidden()
 
             try:
                 membership = request.user.memberships.get(