From d22f492df0221e10e50b73d6820b3e9039130b63 Mon Sep 17 00:00:00 2001
From: phzhik <phzhitnikov@gmail.com>
Date: Thu, 23 Nov 2023 03:55:58 +0400
Subject: [PATCH] * For anonymous users, show only available gifts

---
 store/views.py | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/store/views.py b/store/views.py
index 1939b52..eeaf7c0 100644
--- a/store/views.py
+++ b/store/views.py
@@ -187,11 +187,17 @@ class PromoCodeAPI(mixins.CreateModelMixin, generics.GenericAPIView):
 
 
 class GiftAPI(viewsets.ModelViewSet):
-    queryset = Gift.objects.all()
     serializer_class = GiftSerializer
     permission_classes = [IsAuthenticated | ReadOnly]
     filterset_class = GiftFilter
 
+    def get_queryset(self):
+        if self.request.user.is_authenticated or settings.DISABLE_PERMISSIONS:
+            return Gift.objects.all()
+
+        # For anonymous users, show only available gifts
+        return Gift.objects.filter(available_count__gt=0)
+
 
 class StatisticsAPI(viewsets.GenericViewSet):
     def get_queryset(self):