Add login_required decorators to some views

This allows us to short circuit some request to avoid not needed lookups
for unauthenticated users.
Signed-off-by: Michal Čihař <michal@cihar.com>

weblate/trans/views/edit.py

@@ -593,6 +593,7 @@ def translate(request, project, subproject, lang):
     )
 
 
+@login_required
 @permission_required('trans.automatic_translation')
 def auto_translation(request, project, subproject, lang):
     translation = get_translation(request, project, subproject, lang)
@@ -796,6 +797,8 @@ def load_zen(request, project, subproject, lang):
     )
 
 
+@login_required
+@require_POST
 def save_zen(request, project, subproject, lang):
     '''
     Save handler for zen mode.

weblate/trans/views/git.py

@@ -21,6 +21,7 @@
 from django.utils.translation import ugettext as _
 from django.contrib import messages
 from django.core.exceptions import PermissionDenied
+from django.contrib.auth.decorators import login_required
 from weblate.trans.views.helper import (
     get_project, get_subproject, get_translation
 )
@@ -99,6 +100,7 @@ def perform_reset(request, obj):
     )
 
 
+@login_required
 def commit_project(request, project):
     obj = get_project(request, project)
 
@@ -108,6 +110,7 @@ def commit_project(request, project):
     return perform_commit(request, obj)
 
 
+@login_required
 def commit_subproject(request, project, subproject):
     obj = get_subproject(request, project, subproject)
 
@@ -117,6 +120,7 @@ def commit_subproject(request, project, subproject):
     return perform_commit(request, obj)
 
 
+@login_required
 def commit_translation(request, project, subproject, lang):
     obj = get_translation(request, project, subproject, lang)
 
@@ -126,6 +130,7 @@ def commit_translation(request, project, subproject, lang):
     return perform_commit(request, obj)
 
 
+@login_required
 def update_project(request, project):
     obj = get_project(request, project)
 
@@ -135,6 +140,7 @@ def update_project(request, project):
     return perform_update(request, obj)
 
 
+@login_required
 def update_subproject(request, project, subproject):
     obj = get_subproject(request, project, subproject)
 
@@ -144,6 +150,7 @@ def update_subproject(request, project, subproject):
     return perform_update(request, obj)
 
 
+@login_required
 def update_translation(request, project, subproject, lang):
     obj = get_translation(request, project, subproject, lang)
 
@@ -153,6 +160,7 @@ def update_translation(request, project, subproject, lang):
     return perform_update(request, obj)
 
 
+@login_required
 def push_project(request, project):
     obj = get_project(request, project)
 
@@ -162,6 +170,7 @@ def push_project(request, project):
     return perform_push(request, obj)
 
 
+@login_required
 def push_subproject(request, project, subproject):
     obj = get_subproject(request, project, subproject)
 
@@ -171,6 +180,7 @@ def push_subproject(request, project, subproject):
     return perform_push(request, obj)
 
 
+@login_required
 def push_translation(request, project, subproject, lang):
     obj = get_translation(request, project, subproject, lang)
 
@@ -180,6 +190,7 @@ def push_translation(request, project, subproject, lang):
     return perform_push(request, obj)
 
 
+@login_required
 def reset_project(request, project):
     obj = get_project(request, project)
 
@@ -189,6 +200,7 @@ def reset_project(request, project):
     return perform_reset(request, obj)
 
 
+@login_required
 def reset_subproject(request, project, subproject):
     obj = get_subproject(request, project, subproject)
 
@@ -198,6 +210,7 @@ def reset_subproject(request, project, subproject):
     return perform_reset(request, obj)
 
 
+@login_required
 def reset_translation(request, project, subproject, lang):
     obj = get_translation(request, project, subproject, lang)
 

weblate/trans/views/js.py

@@ -23,6 +23,7 @@ from django.http import HttpResponse, HttpResponseBadRequest, Http404
 from django.contrib.auth.decorators import permission_required
 from django.core.urlresolvers import reverse
 from django.core.exceptions import PermissionDenied
+from django.contrib.auth.decorators import login_required
 
 from weblate.trans.models import Unit, Check, Change
 from weblate.trans.machine import MACHINE_TRANSLATION_SERVICES
@@ -50,6 +51,7 @@ def get_string(request, checksum):
     return HttpResponse(units[0].get_source_plurals()[0])
 
 
+@login_required
 def translate(request, unit_id):
     '''
     AJAX handler for translating.
@@ -127,6 +129,7 @@ def ignore_check(request, check_id):
     return HttpResponse('ok')
 
 
+@login_required
 def git_status_project(request, project):
     obj = get_project(request, project)
 
@@ -167,6 +170,7 @@ def git_status_project(request, project):
     )
 
 
+@login_required
 def git_status_subproject(request, project, subproject):
     obj = get_subproject(request, project, subproject)
 
@@ -188,6 +192,7 @@ def git_status_subproject(request, project, subproject):
     )
 
 
+@login_required
 def git_status_translation(request, project, subproject, lang):
     obj = get_translation(request, project, subproject, lang)
 

weblate/trans/views/lock.py

@@ -41,6 +41,7 @@ def update_lock(request, project, subproject, lang):
     return HttpResponse('ok')
 
 
+@login_required
 def lock_translation(request, project, subproject, lang):
     obj = get_translation(request, project, subproject, lang)
 
@@ -54,6 +55,7 @@ def lock_translation(request, project, subproject, lang):
     return redirect(obj)
 
 
+@login_required
 def unlock_translation(request, project, subproject, lang):
     obj = get_translation(request, project, subproject, lang)
 
@@ -70,6 +72,7 @@ def unlock_translation(request, project, subproject, lang):
     return redirect(obj)
 
 
+@login_required
 def lock_subproject(request, project, subproject):
     obj = get_subproject(request, project, subproject)
 
@@ -88,6 +91,7 @@ def lock_subproject(request, project, subproject):
     return redirect(obj)
 
 
+@login_required
 def unlock_subproject(request, project, subproject):
     obj = get_subproject(request, project, subproject)
 
@@ -104,6 +108,7 @@ def unlock_subproject(request, project, subproject):
     return redirect(obj)
 
 
+@login_required
 def lock_project(request, project):
     obj = get_project(request, project)
 
@@ -123,6 +128,7 @@ def lock_project(request, project):
     return redirect(obj)
 
 
+@login_required
 def unlock_project(request, project):
     obj = get_project(request, project)
 

weblate/trans/views/source.py

@@ -21,6 +21,7 @@
 from django.http import Http404
 from django.core.paginator import Paginator, EmptyPage, PageNotAnInteger
 from django.contrib.auth.decorators import permission_required
+from django.contrib.auth.decorators import login_required
 from django.shortcuts import render, redirect, get_object_or_404
 from django.utils.translation import ugettext as _
 from django.views.decorators.http import require_POST
@@ -112,6 +113,7 @@ def show_source(request, project, subproject):
 
 
 @require_POST
+@login_required
 @permission_required('trans.edit_priority')
 def edit_priority(request, pk):
     """
@@ -128,6 +130,7 @@ def edit_priority(request, pk):
 
 
 @require_POST
+@login_required
 @permission_required('trans.edit_check_flags')
 def edit_check_flags(request, pk):
     """