Only CF managers (=staff users) can add patches to != open fests

1 files changed, 3 insertions, 0 deletions

diff --git a/pgcommitfest/commitfest/views.py b/pgcommitfest/commitfest/views.py
index 1701028..30d8f2f 100644
--- a/pgcommitfest/commitfest/views.py
+++ b/pgcommitfest/commitfest/views.py
@@ -97,6 +97,9 @@ def patchform(request, cfid, patchid):
 @transaction.commit_on_success
 def newpatch(request, cfid):
 	cf = get_object_or_404(CommitFest, pk=cfid)
+	if not cf.status == CommitFest.STATUS_OPEN and not request.user.is_staff:
+		raise Http404("This commitfest is not open!")
+
 	if request.method == 'POST':
 		form = NewPatchForm(data=request.POST)
 		if form.is_valid():