From 39e5711e95115184ff74d9f4142ef12fc23b00a0 Mon Sep 17 00:00:00 2001 From: Martin Gross Date: Fri, 26 Sep 2025 14:41:11 +0200 Subject: [PATCH] API/Organizer: Allow Device-Token access to Organizer settings; expose mf0aes_random_uid (#5326) --- src/pretix/api/serializers/organizer.py | 1 + src/pretix/api/views/organizer.py | 3 ++- src/tests/api/test_permissions.py | 1 - 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/src/pretix/api/serializers/organizer.py b/src/pretix/api/serializers/organizer.py index b2ead9594..58deb71dc 100644 --- a/src/pretix/api/serializers/organizer.py +++ b/src/pretix/api/serializers/organizer.py @@ -484,6 +484,7 @@ class OrganizerSettingsSerializer(SettingsSerializer): 'reusable_media_type_nfc_mf0aes', 'reusable_media_type_nfc_mf0aes_autocreate_giftcard', 'reusable_media_type_nfc_mf0aes_autocreate_giftcard_currency', + 'reusable_media_type_nfc_mf0aes_random_uid', ] def __init__(self, *args, **kwargs): diff --git a/src/pretix/api/views/organizer.py b/src/pretix/api/views/organizer.py index 3bfe0e57a..bf73d51cd 100644 --- a/src/pretix/api/views/organizer.py +++ b/src/pretix/api/views/organizer.py @@ -546,7 +546,8 @@ class DeviceViewSet(mixins.CreateModelMixin, class OrganizerSettingsView(views.APIView): - permission = 'can_change_organizer_settings' + permission = None + write_permission = 'can_change_organizer_settings' def get(self, request, *args, **kwargs): s = OrganizerSettingsSerializer(instance=request.organizer.settings, organizer=request.organizer, context={ diff --git a/src/tests/api/test_permissions.py b/src/tests/api/test_permissions.py index e0537d976..c3c08f439 100644 --- a/src/tests/api/test_permissions.py +++ b/src/tests/api/test_permissions.py @@ -205,7 +205,6 @@ event_permission_sub_urls = [ org_permission_sub_urls = [ ('patch', 'can_change_organizer_settings', '', 200), - ('get', 'can_change_organizer_settings', 'settings/', 200), ('patch', 'can_change_organizer_settings', 'settings/', 200), ('get', 'can_change_organizer_settings', 'webhooks/', 200), ('post', 'can_change_organizer_settings', 'webhooks/', 400),