Check available in update instead in handleApply so form is not d…

…isplayed at all if user have not access.

CHANGES.rst

@@ -7,6 +7,9 @@ Changelog
 
 - Import `safe_encode` from `imio.pyutils` instead `imio.helpers`.
   [gbastien]
+- Check available in `update` instead in `handleApply` so form is not
+  displayed at all if user have not access.
+  [gbastien]
 
 1.14 (2023-09-04)
 -----------------

src/collective/eeafaceted/batchactions/browser/views.py

@@ -107,6 +107,9 @@ def _apply(self, **data):
         raise NotImplementedError
 
     def update(self):
+        if not self.available():
+            raise Unauthorized
+
         form = self.request.form
         if 'form.widgets.uids' in form:
             uids = form['form.widgets.uids']
@@ -132,9 +135,6 @@ def update(self):
     @button.buttonAndHandler(_(u'Apply'), name='apply', condition=lambda fi: fi.do_apply)
     def handleApply(self, action):
         """ """
-        if not self.available():
-            raise Unauthorized
-
         data, errors = self.extractData()
         if errors:
             self.status = self.formErrorsMessage