deposit: record login required on deposit edit

* closes inveniosoftware#2684

invenio_app_rdm/records_ui/views/decorators.py

@@ -11,7 +11,8 @@
 
 from functools import wraps
 
-from flask import g, make_response, redirect, request, url_for
+from flask import g, make_response, redirect, request, session, url_for
+from flask_login import login_required
 from invenio_communities.communities.resources.serializer import (
     UICommunityJSONSerializer,
 )
@@ -381,3 +382,24 @@ def view(*args, **kwargs):
         return response
 
     return view
+
+
+def secret_link_or_login_required():
+    """Skip login redirection check for requests with secret links.
+
+    If access has been granted via a secret link, then permissions are checked
+    in the dedicated view.
+    """
+
+    def decorator(f):
+        @wraps(f)
+        def view(**kwargs):
+            secret_link_token_arg = "token"
+            session_token = session.get(secret_link_token_arg, None)
+            if session_token is None:
+                login_required(f)
+            return f(**kwargs)
+
+        return view
+
+    return decorator

invenio_app_rdm/records_ui/views/deposits.py

@@ -33,7 +33,12 @@
 from sqlalchemy.orm import load_only
 
 from ..utils import set_default_value
-from .decorators import pass_draft, pass_draft_community, pass_draft_files
+from .decorators import (
+    pass_draft,
+    pass_draft_community,
+    pass_draft_files,
+    secret_link_or_login_required,
+)
 from .filters import get_scheme_label
 
 
@@ -409,7 +414,7 @@ def deposit_create(community=None):
     )
 
 
-@login_required
+@secret_link_or_login_required()
 @pass_draft(expand=True)
 @pass_draft_files
 def deposit_edit(pid_value, draft=None, draft_files=None, files_locked=True):