From f6ade70b57d60a382ddc7611a6a45add36cae870 Mon Sep 17 00:00:00 2001 From: Egor fureunoir Gorbunov Date: Sat, 7 Jun 2025 18:39:03 +0300 Subject: [PATCH] Fixes: OrderViewSet fixes --- core/viewsets.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/core/viewsets.py b/core/viewsets.py index f9c105f4..fc23a1b7 100644 --- a/core/viewsets.py +++ b/core/viewsets.py @@ -256,6 +256,9 @@ class OrderViewSet(EvibesViewSet): qs = super().get_queryset() user = self.request.user + if not user.is_authenticated: + return qs.filter(user__isnull=True) + if user.has_perm("core.view_order"): return qs