Do not allow banning users by not a moderator. Show 403 error when posting as a banned user, not 500

boards/locale/ru/LC_MESSAGES/django.po

@@ -590,3 +590,6 b' msgstr "\xd0\x9d\xd0\xb5\xd0\xba\xd0\xbe\xd1\x82\xd0\xbe\xd1\x80\xd1\x8b\xd0\xb5 \xd1\x84\xd0\xb0\xd0\xb9\xd0\xbb\xd1\x8b \xd1\x83\xd0\xb6\xd0\xb5 \xd0\xbf\xd1\x80\xd0\xb8\xd1\x81\xd1\x83\xd1\x82\xd1\x81\xd1\x82\xd0\xb2\xd1\x83\xd1\x8e\xd1\x82 \xd0\xbd\xd0\xb0 \xd0\xb1\xd0\xbe\xd1\x80\xd0\xb4\xd0\xb5."'
 msgid "Do not download URLs"
 msgstr "Не загружать ссылки"
 
+msgid "Ban and delete"
+msgstr "Забанить и удалить"
+

boards/models/post/manager.py

@@ -7,6 +7,7 b' from boards.abstracts.exceptions import '
 from django.db import models, transaction
 from django.utils import timezone
 from django.dispatch import Signal
+from django.core.exceptions import PermissionDenied
 
 import boards
 
@@ -43,7 +44,7 b' class PostManager(models.Manager):'
             is_banned = False
 
         if is_banned:
-            raise BannedException("This user is banned")
+            raise PermissionDenied()
 
         if not tags:
             tags = []

boards/templates/boards/post.html

@@ -100,7 +100,7 b''
                                     visible: {% if post.global_id_id %}true{% else %}false{% endif %}
                                 },
                                 banAndDelete: {
-                                    name: 'Ban and delete',
+                                    name: '{% trans "Ban and delete" %}',
                                     callback: function(key, opt) {
                                         window.location = '{% url 'utils' %}?method=ban_and_delete&post_id={{ post.id }}';
                                     },

boards/views/utils.py

@@ -1,6 +1,8 b''
 from django.shortcuts import redirect
 from django.utils.decorators import method_decorator
 from django.views.decorators.csrf import csrf_protect
+from django.contrib.auth.decorators import permission_required
+
 from boards.views.base import BaseBoardView, CONTEXT_FORM
 from boards.views.mixins import DispatcherMixin, PARAMETER_METHOD
 from boards.models import Post, Ban
@@ -13,7 +15,7 b' class UtilsView(BaseBoardView, Dispatche'
 
         return redirect('index')
 
-
+    @permission_required('boards.delete_post')
     def ban_and_delete(self, request):
         post = Post.objects.get(id=request.GET['post_id'])
         Ban.objects.get_or_create(ip=post.poster_ip)