diff --git a/core/docs/images/evibes-big-simple.png b/core/docs/images/evibes-big-simple.png new file mode 100644 index 00000000..08ba5f8c Binary files /dev/null and b/core/docs/images/evibes-big-simple.png differ diff --git a/core/permissions.py b/core/permissions.py index 415585ac..c033af30 100644 --- a/core/permissions.py +++ b/core/permissions.py @@ -36,6 +36,8 @@ class EvibesPermission(permissions.BasePermission): } USER_SCOPED_ACTIONS = { + "list", + "retrieve", "buy", "buy_unregistered", "current", @@ -107,9 +109,7 @@ class EvibesPermission(permissions.BasePermission): return queryset.filter(user=request.user) if view.action in ("list", "retrieve"): if request.user.has_perm(f"{app_label}.view_{model_name}"): - if request.user.is_staff: - return queryset - return queryset.filter(user=request.user, is_active=True) + return queryset return queryset.none() base = queryset.filter(is_active=True, user=request.user)