API-level tests

2018-09-20 10:07:26 +02:00
parent 0bab8adc41
commit 1ba4047b1b
7 changed files with 232 additions and 4 deletions
--- a/src/pretix/base/models/devices.py
+++ b/src/pretix/base/models/devices.py
@@ -85,9 +85,10 @@ class Device(LoggedModel):

    def permission_set(self) -> set:
        return {
+            'can_change_items',  # TODO: Remove, after read operations are allowed without
            'can_view_orders',
            'can_change_orders',
-            'can_view_products'
+            'can_view_vouchers',  # TODO: Really required
        }

    def get_event_permission_set(self, organizer, event) -> set: