From dea219f974fcef09efa4154b2dc3c37fd2a25c7b Mon Sep 17 00:00:00 2001 From: Egor fureunoir Gorbunov Date: Thu, 18 Sep 2025 14:10:06 +0300 Subject: [PATCH] Fixes: 1) Remove redundant permission check for `core.change_orderproduct` in `mutations.py`; Extra: None; --- core/graphene/mutations.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/graphene/mutations.py b/core/graphene/mutations.py index 1ba0445e..55583cba 100644 --- a/core/graphene/mutations.py +++ b/core/graphene/mutations.py @@ -544,7 +544,7 @@ class FeedbackProductAction(BaseMutation): user = info.context.user try: order_product = OrderProduct.objects.get(uuid=order_product_uuid) - if user != order_product.order.user or not user.has_perm("core.change_orderproduct"): + if user != order_product.order.user: raise PermissionDenied(permission_denied_message) match action: case "add":