phzhik/kwork-poizonstore
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

* Disallow anonymous users to list Checklists

Browse Source
This commit is contained in:
Phil Zhitnikov 2023-07-10 20:27:03 +04:00
parent a528974347
commit 7840af8fe2
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
store/views.py
View File

@ -76,6 +76,7 @@ class ChecklistAPI(mixins.ListModelMixin, mixins.CreateModelMixin, mixins.Retrie
if self.request.user.is_authenticated: if self.request.user.is_authenticated:
return ChecklistSerializer return ChecklistSerializer
# Anonymous users can edit only a certain set of fields
return AnonymousUserChecklistSerializer return AnonymousUserChecklistSerializer
def get_permissions(self): def get_permissions(self):
@ -107,6 +108,11 @@ class ChecklistAPI(mixins.ListModelMixin, mixins.CreateModelMixin, mixins.Retrie
def get(self, request, *args, **kwargs): def get(self, request, *args, **kwargs):
if 'id' in kwargs: if 'id' in kwargs:
return self.retrieve(request, *args, **kwargs) return self.retrieve(request, *args, **kwargs)
if not request.user.is_authenticated:
# Anonymous users can't list checklists
return Response([])
return self.list(request, *args, **kwargs) return self.list(request, *args, **kwargs)
def patch(self, request, *args, **kwargs): def patch(self, request, *args, **kwargs):