From 2703dcb5a90960ca5e9c4b22ec6dd1af43b8c8ce Mon Sep 17 00:00:00 2001
From: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>
Date: Fri, 29 Mar 2013 23:23:03 +0100
Subject: [PATCH] Fix 500 in account.decorators.group_required for anonymous
 user

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>
---
 xnet/accounts/decorators.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/xnet/accounts/decorators.py b/xnet/accounts/decorators.py
index ec2a8df..4e94ef2 100644
--- a/xnet/accounts/decorators.py
+++ b/xnet/accounts/decorators.py
@@ -48,6 +48,8 @@ class group_required(object):
         @functools.wraps(view_func)
         def wrapped_view_func(request, group_slug, *args, **kwargs):
             group = get_object_or_404(XGroup, short=group_slug)
+            if not request.user.is_authenticated():
+                return HttpResponseForbidden()
 
             try:
                 membership = request.user.memberships.get(
-- 
2.1.4