Fixes: OrderViewSet fixes
This commit is contained in:
parent
6c2d452684
commit
f6ade70b57
1 changed files with 3 additions and 0 deletions
|
|
@ -256,6 +256,9 @@ class OrderViewSet(EvibesViewSet):
|
|||
qs = super().get_queryset()
|
||||
user = self.request.user
|
||||
|
||||
if not user.is_authenticated:
|
||||
return qs.filter(user__isnull=True)
|
||||
|
||||
if user.has_perm("core.view_order"):
|
||||
return qs
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue