diff options
| author | Étienne Loks <etienne.loks@iggdrasil.net> | 2018-10-18 11:50:20 +0200 |
|---|---|---|
| committer | Étienne Loks <etienne.loks@iggdrasil.net> | 2018-10-24 12:06:09 +0200 |
| commit | a3afdb65a9a780bfccc5830710eebc6a290db38f (patch) | |
| tree | a3289c874c9bc0ebe0a7d2674ad770aa75e75c6d /ishtar_common | |
| parent | 72428f65960051207d89482d2329381e4248e624 (diff) | |
| download | Ishtar-a3afdb65a9a780bfccc5830710eebc6a290db38f.tar.bz2 Ishtar-a3afdb65a9a780bfccc5830710eebc6a290db38f.zip | |
Fix access to sheet and permission check for owns
Diffstat (limited to 'ishtar_common')
| -rw-r--r-- | ishtar_common/backend.py | 7 | ||||
| -rw-r--r-- | ishtar_common/views_item.py | 2 |
2 files changed, 4 insertions, 5 deletions
diff --git a/ishtar_common/backend.py b/ishtar_common/backend.py index 261e4dc6f..d5e092fa5 100644 --- a/ishtar_common/backend.py +++ b/ishtar_common/backend.py @@ -55,10 +55,9 @@ class ObjectPermBackend(ModelBackend): if obj is None: model_name = perm.split('_')[-1].lower() model = None - for app in apps.get_apps(): - for modl in apps.get_models(app): - if modl.__name__.lower() == model_name: - model = modl + for modl in apps.get_models(): + if modl.__name__.lower() == model_name: + model = modl if not model: return False return not is_ownperm or model.has_item_of(ishtar_user) diff --git a/ishtar_common/views_item.py b/ishtar_common/views_item.py index d068fb554..5cd3eb826 100644 --- a/ishtar_common/views_item.py +++ b/ishtar_common/views_item.py @@ -135,7 +135,7 @@ def show_item(model, name, extra_dct=None): return HttpResponse('NOK') query_own = model.get_query_owns(request.user.ishtaruser) if query_own: - q = q.filter(query_own) + q = q.filter(query_own).distinct() try: item = q.get(pk=pk) except ObjectDoesNotExist: |