respect access restrictions in editor API

This commit is contained in:
Laura Klünder 2017-07-13 22:22:13 +02:00
parent c208e97ff1
commit 890225784a
3 changed files with 23 additions and 16 deletions

View file

@ -21,12 +21,6 @@ class AccessRestriction(TitledMixin, models.Model):
return cls.objects.all()
return cls.objects.none()
@classmethod
def q_for_request(cls, request, prefix=''):
if request.user.is_authenticated and request.user.is_superuser:
return Q()
return Q(**{prefix + 'access_restriction__isnull': True})
class AccessRestrictionMixin(SerializableMixin, models.Model):
access_restriction = models.ForeignKey(AccessRestriction, null=True, blank=True,
@ -42,4 +36,10 @@ class AccessRestrictionMixin(SerializableMixin, models.Model):
@classmethod
def qs_for_request(cls, request):
return cls.objects.filter(AccessRestriction.q_for_request(request))
return cls.objects.filter(cls.q_for_request(request))
@classmethod
def q_for_request(cls, request, prefix=''):
if request.user.is_authenticated and request.user.is_superuser:
return Q()
return Q(**{prefix + 'access_restriction__isnull': True})