fix api secret auth (fixes #118)

This commit is contained in:
Laura Klünder 2023-12-02 01:32:41 +01:00
parent 7c12b649e3
commit 29a1106e93

View file

@ -85,7 +85,7 @@ class APITokenAuth(HttpBearer):
raise APITokenInvalid raise APITokenInvalid
# get user permissions and restrict them based on scopes # get user permissions and restrict them based on scopes
user_permissions: UserPermissions = secret.user.permissions user_permissions: UserPermissions = UserPermissions.get_for_user(secret.user)
if secret.scope_mesh is False: if secret.scope_mesh is False:
user_permissions.mesh_control = False user_permissions.mesh_control = False
if secret.scope_editor is False: if secret.scope_editor is False: