[FIX] RECRUITMENT: Restrict access to unpublished job postings in recruitment module

recruitment/views/surveys.py

@@ -348,7 +348,9 @@ def application_form(request):
         return redirect("open-recruitments")
 
     try:
-        recruitment = Recruitment.objects.filter(id=recruitment_id).first()
+        recruitment = Recruitment.objects.filter(
+            id=recruitment_id, is_published=True
+        ).first()  # Only create applications for published recruitments.
         if not recruitment:
             messages.error(request, _("Recruitment not found"))
             return redirect("open-recruitments")

recruitment/views/views.py

@@ -2648,6 +2648,7 @@ def open_recruitments(request):
     return response
 
 
+@hx_request_required
 def recruitment_details(request, id):
     """
     This method is used to render the recruitment details page