fix permission to see certificate

certificates/templates/certificates/step.html

@@ -38,9 +38,11 @@
             </small>
           </div>
           <div class="d-flex gap-2">
+            {% if request.user|is_broker or request.user|is_manager %}
             <button class="btn btn-outline-secondary" type="button" data-bs-toggle="modal" data-bs-target="#printHologramModal">
               <i class="bx bx-printer me-2"></i> پرینت
             </button>
+            {% endif %}
 
             <a href="{% url 'processes:request_list' %}" class="btn btn-outline-secondary">
               <i class="bx bx-chevron-right bx-sm ms-sm-n2"></i>
@@ -52,7 +54,7 @@
         <div class="bs-stepper wizard-vertical vertical mt-2">
           {% stepper_header instance step %}
           <div class="bs-stepper-content">
-
+            {% if request.user|is_broker or request.user|is_manager or request.user|is_accountant or request.user|is_water_resource_manager %}
             <div class="card">
               <div class="card-body">
                 <div class="d-flex mb-2">
@@ -115,6 +117,21 @@
                 </form>
               </div>
             </div>
+            {% else %}
+            <div class="card">
+              <div class="card-body">
+                <div class="text-center py-5">
+                  <div class="mb-4">
+                    <i class="bx bx-lock-alt text-warning" style="font-size: 80px;"></i>
+                  </div>
+                  <h4 class="mb-3">دسترسی محدود</h4>
+                  <p class="text-muted mb-4">
+                    متأسفانه شما دسترسی لازم برای مشاهده این صفحه را ندارید.<br>
+                  </p>
+                </div>
+              </div>
+            </div>
+            {% endif %}
           </div>
         </div>
       </div>

certificates/views.py

@@ -13,7 +13,7 @@ from invoices.models import Invoice
 from installations.models import InstallationReport
 from .models import CertificateTemplate, CertificateInstance
 from common.consts import UserRoles
-
+from common.decorators import allowed_roles
 from _helpers.jalali import Gregorian
 from processes.utils import get_scoped_instance_or_404
 
@@ -151,6 +151,7 @@ def certificate_step(request, instance_id, step_id):
 
 
 @login_required
+@allowed_roles([UserRoles.BROKER, UserRoles.MANAGER])
 def certificate_print(request, instance_id):
     instance = get_scoped_instance_or_404(request, instance_id)
     cert = CertificateInstance.objects.filter(process_instance=instance).order_by('-created').first()