From 9bef360342d4e6419f18f890c5d34e0a676630b6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Laura=20Kl=C3=BCnder?= Date: Tue, 19 Dec 2017 17:12:40 +0100 Subject: [PATCH] if you can review changesets you can see all of them --- src/c3nav/editor/models/changeset.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/c3nav/editor/models/changeset.py b/src/c3nav/editor/models/changeset.py index 671a1e25..c30e10b5 100644 --- a/src/c3nav/editor/models/changeset.py +++ b/src/c3nav/editor/models/changeset.py @@ -81,7 +81,7 @@ class ChangeSet(models.Model): """ Returns a base QuerySet to get only changesets the current user is allowed to see """ - if request.user.is_authenticated: + if request.user.is_authenticated and not request.user_permissions.review_changesets: return ChangeSet.objects.filter(author=request.user) elif 'changeset' in request.session: return ChangeSet.objects.filter(pk=request.session['changeset'])