diff options
| author | Étienne Loks <etienne.loks@iggdrasil.net> | 2017-03-28 13:17:29 +0200 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2017-03-29 18:25:09 +0200 |
| commit | 964ce0244baf55cc1af1029b67f991a0865f1f3c (patch) | |
| tree | 72aaceee89f2fe1e30602314d2871bb433fd5a15 /archaeological_finds | |
| parent | 9356c39d093063a7127ad4634492a3450aa698fe (diff) | |
| download | Ishtar-964ce0244baf55cc1af1029b67f991a0865f1f3c.tar.bz2 Ishtar-964ce0244baf55cc1af1029b67f991a0865f1f3c.zip | |
Access control: fix get owns query for UEs, finds, warehouses and containers
Diffstat (limited to 'archaeological_finds')
| -rw-r--r-- | archaeological_finds/models_finds.py | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/archaeological_finds/models_finds.py b/archaeological_finds/models_finds.py index c54fd1ed9..cbd13e925 100644 --- a/archaeological_finds/models_finds.py +++ b/archaeological_finds/models_finds.py @@ -868,11 +868,12 @@ class Find(BaseHistorizedItem, ImageModel, OwnPerms, ShortMenuItem): @classmethod def get_query_owns(cls, user): - return Q(base_finds__context_record__operation__scientist=user. - ishtaruser.person) | \ - Q(base_finds__context_record__operation__in_charge=user. - ishtaruser.person) | \ - Q(history_creator=user) + return (Q(base_finds__context_record__operation__scientist=user. + ishtaruser.person) | + Q(base_finds__context_record__operation__in_charge=user. + ishtaruser.person) | + Q(history_creator=user)) \ + & Q(base_finds__context_record__operation__end_date__isnull=True) @classmethod def get_owns(cls, user, menu_filtr=None, limit=None, |