From 13f9202121e5470827174079da7fc699a8227295 Mon Sep 17 00:00:00 2001 From: Étienne Loks Date: Thu, 9 Jan 2025 12:40:57 +0100 Subject: 🐛 new permissions: fix permission_check for action (refs #6126) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- archaeological_context_records/views.py | 17 +++++------------ 1 file changed, 5 insertions(+), 12 deletions(-) (limited to 'archaeological_context_records') diff --git a/archaeological_context_records/views.py b/archaeological_context_records/views.py index 691564341..49b94553e 100644 --- a/archaeological_context_records/views.py +++ b/archaeological_context_records/views.py @@ -41,7 +41,7 @@ from ishtar_common.views import ( wizard_is_available, QAItemEditForm, ) -from ishtar_common.views_item import get_item, show_item, revert_item +from ishtar_common.views_item import get_item, get_autocomplete_query, show_item, revert_item from archaeological_context_records import wizards show_contextrecord = show_item( @@ -51,19 +51,12 @@ revert_contextrecord = revert_item(models.ContextRecord) def autocomplete_contextrecord(request): - ishtaruser = getattr(request.user, "ishtaruser", None) - if not ishtaruser: - return HttpResponse(content_type="text/plain") - if not ishtaruser.has_permission( - "archaeological_context_records.view_contextrecord" - ) and not ishtaruser.has_permission( - "archaeological_context_records.view_own_contextrecord", - ): - return HttpResponse(content_type="text/plain") - if not request.GET.get("term"): + query = get_autocomplete_query( + request, "archaeological_context_records", "contextrecord" + ) + if query is None: return HttpResponse(content_type="text/plain") q = request.GET.get("term") - query = Q() if request.GET.get("operation__pk"): query = Q(operation__pk=request.GET.get("operation__pk")) for q in q.split(" "): -- cgit v1.2.3