2025-summer/team-3
12
Fork 0
Code Issues Pull requests Projects Releases Activity

fixed sso group user permission logic

Browse source
This commit is contained in:
Jenny Danzmayr 2024-09-16 14:44:55 +02:00
parent 84eb346501
commit 33242ba86d
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/c3nav/control/sso/pipeline.py
View file

@ -12,7 +12,7 @@ def access_permissions(backend, response, user=None, *args, **kwargs):
if not groups: if not groups:
return return
existing_grants = set(AccessPermission.objects.filter(sso_grant__provider=backend.name) existing_grants = set(user.accesspermissions.filter(sso_grant__provider=backend.name)
.values_list('sso_grant_id', flat=True)) .values_list('sso_grant_id', flat=True))
new_grants = AccessPermissionSSOGrant.objects.filter(provider=backend.name, group__in=groups) \ new_grants = AccessPermissionSSOGrant.objects.filter(provider=backend.name, group__in=groups) \
.exclude(id__in=existing_grants) .exclude(id__in=existing_grants)