fix(access): when checking object permissions, dont cast obj to int untill checking it exists

ref: #471 #511
This commit is contained in:
2025-02-01 17:36:29 +09:30
parent 78afe7c86b
commit b7cdb21136

View File

@ -270,12 +270,12 @@ class OrganizationPermissionMixin(
return True
object_organization = int(view._obj_organization)
object_organization = view._obj_organization
if object_organization:
if(
object_organization
int(object_organization)
in view.get_permission_organizations( view.get_permission_required() )
or request.user.is_superuser
or getattr(request.app_settings.global_organization, 'id', 0) == int(object_organization)