diff --git a/core/viewsets.py b/core/viewsets.py index f9c105f4..fc23a1b7 100644 --- a/core/viewsets.py +++ b/core/viewsets.py @@ -256,6 +256,9 @@ class OrderViewSet(EvibesViewSet): qs = super().get_queryset() user = self.request.user + if not user.is_authenticated: + return qs.filter(user__isnull=True) + if user.has_perm("core.view_order"): return qs