nofusscomputing/centurion_erp
1
0
Fork 0
Code Issues Wiki Activity

chore(api): implement workaround for listview

Browse Source 
until logic written, all listview access=true

!16
This commit is contained in:
Jon Lockwood
2024-06-02 01:39:23 +09:30
parent 59b5fea639
commit c3f3c1247e
1 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
app/api/views/mixin.py
View File

@ -30,7 +30,7 @@ class OrganizationPermissionAPI(DjangoObjectPermissions, OrganizationMixin):
if view.queryset.model._meta:
self.obj = view.queryset.model
method = self.request.method.lower()
method = self.request._request.method.lower()
object_organization = None
@ -103,7 +103,7 @@ class OrganizationPermissionAPI(DjangoObjectPermissions, OrganizationMixin):
self.obj = view.queryset.get()
if hasattr(self, 'obj') and not object_organization:
if hasattr(self, 'obj') and not object_organization and 'pk' in view.kwargs:
if self.obj.get_organization():
@ -115,6 +115,13 @@ class OrganizationPermissionAPI(DjangoObjectPermissions, OrganizationMixin):
object_organization = 0
# ToDo: implement proper checking of listview as this if allows ALL.
if 'pk' not in view.kwargs and method == 'get' and not object_organization:
return True
if not object_organization:
raise Exception("unable to determine object organization")