🐛 Fix enriched videos in playlists

pod/enrichment/views.py

@@ -248,7 +248,7 @@ def video_enrichment(request, slug, slug_c=None, slug_t=None, slug_private=None)
                 "videos": videos,
             }
         else:
-            return HttpResponseNotFound()
+            raise PermissionDenied(_("You cannot access this playlist because it is private."))
     template_video = (
         "enrichment/video_enrichment-iframe.html"
         if (request.GET.get("is_iframe"))

pod/playlist/utils.py

@@ -395,8 +395,11 @@ def playlist_can_be_displayed(request: WSGIRequest, playlist: Playlist) -> bool:
         playlist.visibility == "public"
         or playlist.visibility == "protected"
         or (
-            playlist.owner == request.user
-            or playlist in get_playlists_for_additional_owner(request.user)
-            or request.user.is_staff
+            request.user.is_authenticated
+            and (
+                playlist.owner == request.user
+                or playlist in get_playlists_for_additional_owner(request.user)
+                or request.user.is_staff
+            )
         )
     )

pod/video/views.py

@@ -1,4 +1,5 @@
 """Esup-Pod videos views."""
+from django.core.exceptions import PermissionDenied
 from django.core.handlers.wsgi import WSGIRequest
 from django.core.paginator import Paginator, EmptyPage, PageNotAnInteger
 from django.core.serializers.json import DjangoJSONEncoder
@@ -887,7 +888,7 @@ def video(request, slug, slug_c=None, slug_t=None, slug_private=None):
                 "videos": videos,
             }
         else:
-            return HttpResponseNotFound()
+            raise PermissionDenied(_("You cannot access this playlist because it is private."))
     return render_video(request, id, slug_c, slug_t, slug_private, template_video, params)