1 files changed, 36 insertions, 0 deletions

diff --git a/modules/lists/lists.go b/modules/lists/lists.go
index a219bcc..73a3fe7 100644
--- a/modules/lists/lists.go
+++ b/modules/lists/lists.go
@@ -75,6 +75,7 @@ func (m *Module) Init(g *grilist.Grilist) {
         m.g.Router.POST("/list/:id/order", m.updateGrilOrder)
         m.g.Router.POST("/list/:id", m.addGrilToList)
         m.g.Router.DELETE("/list/:id/order", m.removeGrilFromList)
+        m.g.Router.GET("/list/:id/settings", m.viewListSettings)
         m.g.Router.GET("/new/list", m.displayCreateList)
         m.g.Router.POST("/new/list", m.createList)
 
@@ -285,6 +286,41 @@ func (m *Module) viewList(w http.ResponseWriter, r *http.Request, p httprouter.P
         m.g.Renderer.RenderPage("list", w, data)
 }
 
+func (m *Module) viewListSettings(w http.ResponseWriter, r *http.Request, p httprouter.Params) {
+        user, err := m.g.Charakterin.GetUserFromRequest(r)
+        if err != nil {
+                log.Println("invalid viewListSettings user")
+                http.Redirect(w, r, fmt.Sprintf("/list/%s", p.ByName("id")), 403)
+                return
+        }
+
+        id, err := strconv.Atoi(p.ByName("id"))
+        if err != nil {
+                log.Println("invalid viewListSettings ID")
+                http.Redirect(w, r, "/", 400)
+                return
+        }
+
+        list, err := m.FromID(id, false)
+        if err != nil {
+                log.Println("invalid viewListSettings ID (could not get list)")
+                http.Redirect(w, r, fmt.Sprintf("/list/%d", id), 500)
+                return
+        }
+
+        // checken, ob der user auch list owner ist
+        if user.ID != list.Owner.ID {
+                log.Println("invalid viewListSettings request: user not list owner")
+                http.Redirect(w, r, fmt.Sprintf("/list/%d", id), 403)
+                return
+        }
+
+        data := m.g.Renderer.DefaultData()
+        data["user"] = user
+        data["list"] = list
+        m.g.Renderer.RenderPage("list_settings", w, data)
+}
+
 func (m *Module) addGrilToList(w http.ResponseWriter, r *http.Request, p httprouter.Params) {
         slistID := p.ByName("id")