Features: 1) Add "list" and "retrieve" to USER_SCOPED_ACTIONS; 2) Include new image asset evibes-big-simple.png;
Fixes: None; Extra: 1) Simplify queryset filtering logic for "list" and "retrieve" actions;
This commit is contained in:
parent
7b5585ea9f
commit
04656ea223
2 changed files with 3 additions and 3 deletions
BIN
core/docs/images/evibes-big-simple.png
Normal file
BIN
core/docs/images/evibes-big-simple.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 61 KiB |
|
|
@ -36,6 +36,8 @@ class EvibesPermission(permissions.BasePermission):
|
|||
}
|
||||
|
||||
USER_SCOPED_ACTIONS = {
|
||||
"list",
|
||||
"retrieve",
|
||||
"buy",
|
||||
"buy_unregistered",
|
||||
"current",
|
||||
|
|
@ -107,9 +109,7 @@ class EvibesPermission(permissions.BasePermission):
|
|||
return queryset.filter(user=request.user)
|
||||
if view.action in ("list", "retrieve"):
|
||||
if request.user.has_perm(f"{app_label}.view_{model_name}"):
|
||||
if request.user.is_staff:
|
||||
return queryset
|
||||
return queryset.filter(user=request.user, is_active=True)
|
||||
return queryset
|
||||
return queryset.none()
|
||||
|
||||
base = queryset.filter(is_active=True, user=request.user)
|
||||
|
|
|
|||
Loading…
Reference in a new issue