diff options
| author | Étienne Loks <etienne.loks@iggdrasil.net> | 2017-03-29 19:42:02 +0200 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2017-03-29 19:42:02 +0200 |
| commit | e1ec2cc7a72a502f9c8cb42b571bdadcad003237 (patch) | |
| tree | d509f42b35d7a51c7c01cae9d3d89b425c3e7a26 /archaeological_operations/models.py | |
| parent | 7e06dcca189d52e8cd2ec8b828bf59116ed8b934 (diff) | |
| download | Ishtar-e1ec2cc7a72a502f9c8cb42b571bdadcad003237.tar.bz2 Ishtar-e1ec2cc7a72a502f9c8cb42b571bdadcad003237.zip | |
Access control: collaborators are included in get_own_query for operations, context records and finds (refs #3196)
Diffstat (limited to 'archaeological_operations/models.py')
| -rw-r--r-- | archaeological_operations/models.py | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/archaeological_operations/models.py b/archaeological_operations/models.py index 782f9cf35..13997a632 100644 --- a/archaeological_operations/models.py +++ b/archaeological_operations/models.py @@ -572,8 +572,10 @@ class Operation(ClosedItem, BaseHistorizedItem, ImageModel, OwnPerms, @classmethod def get_query_owns(cls, user): - return (Q(in_charge=user.ishtaruser.person) |\ - Q(scientist=user.ishtaruser.person) |\ + return ( + Q(in_charge=user.ishtaruser.person) | + Q(scientist=user.ishtaruser.person) | + Q(collaborators__pk=user.ishtaruser.person.pk) | Q(history_creator=user)) & Q(end_date__isnull=True) def is_active(self): |