respect access restrictions in editor API
This commit is contained in:
parent
c208e97ff1
commit
890225784a
3 changed files with 23 additions and 16 deletions
|
@ -21,12 +21,6 @@ class AccessRestriction(TitledMixin, models.Model):
|
|||
return cls.objects.all()
|
||||
return cls.objects.none()
|
||||
|
||||
@classmethod
|
||||
def q_for_request(cls, request, prefix=''):
|
||||
if request.user.is_authenticated and request.user.is_superuser:
|
||||
return Q()
|
||||
return Q(**{prefix + 'access_restriction__isnull': True})
|
||||
|
||||
|
||||
class AccessRestrictionMixin(SerializableMixin, models.Model):
|
||||
access_restriction = models.ForeignKey(AccessRestriction, null=True, blank=True,
|
||||
|
@ -42,4 +36,10 @@ class AccessRestrictionMixin(SerializableMixin, models.Model):
|
|||
|
||||
@classmethod
|
||||
def qs_for_request(cls, request):
|
||||
return cls.objects.filter(AccessRestriction.q_for_request(request))
|
||||
return cls.objects.filter(cls.q_for_request(request))
|
||||
|
||||
@classmethod
|
||||
def q_for_request(cls, request, prefix=''):
|
||||
if request.user.is_authenticated and request.user.is_superuser:
|
||||
return Q()
|
||||
return Q(**{prefix + 'access_restriction__isnull': True})
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue