AI security fixes

eventplanner/views.py

@@ -2,6 +2,7 @@ import datetime
 
 from crispy_forms.helper import FormHelper
 from crispy_forms.layout import Submit
+from django.core.exceptions import PermissionDenied
 from django.forms import TextInput
 from django.forms.models import ModelForm
 from django.http import HttpResponse
@@ -114,6 +115,8 @@ def events_grid(request):
 
 
 def deleteEvent(request, pk):
+    if not EventParticipation.isAdmin(request.user):
+        raise PermissionDenied
     Event.objects.get(pk=pk).delete()
     return redirect(events_grid)