fureunoir/schon
fureunoir/schon
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Features: 1) Add get_queryset method to filter queries based on user permissions;

Browse source 
Fixes: 1) None;

Extra: None;
This commit is contained in:
Egor Pavlovich Gorbunov 2025-05-29 23:07:02 +03:00
parent 04656ea223
commit ac3268748e
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
core/viewsets.py
View file

@ -234,6 +234,15 @@ class OrderViewSet(EvibesViewSet):
"remove_order_product": RemoveOrderProductSerializer, "remove_order_product": RemoveOrderProductSerializer,
} }
def get_queryset(self):
qs = super().get_queryset()
user = self.request.user
if user.has_perm("core.view_order"):
return qs
return qs.filter(user=user)
@action(detail=False, methods=["get"], url_path="current") @action(detail=False, methods=["get"], url_path="current")
def current(self, request, *_args, **kwargs): def current(self, request, *_args, **kwargs):
if not request.user.is_authenticated: if not request.user.is_authenticated: