From 6008e3d11ce3d0538e5791444f473232743f5c96 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Tue, 1 Mar 2022 16:53:48 +0100 Subject: [PATCH] API: Fix organizer-level export with OAuth token (Z#2395272) --- src/pretix/api/views/exporters.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/pretix/api/views/exporters.py b/src/pretix/api/views/exporters.py index adb1f4b57..f21d99007 100644 --- a/src/pretix/api/views/exporters.py +++ b/src/pretix/api/views/exporters.py @@ -147,7 +147,11 @@ class OrganizerExportersViewSet(ExportersMixin, viewsets.ViewSet): @cached_property def exporters(self): exporters = [] - events = (self.request.auth or self.request.user).get_events_with_permission('can_view_orders', request=self.request).filter( + if isinstance(self.request.auth, (Device, TeamAPIToken)): + perm_holder = self.request.auth + else: + perm_holder = self.request.user + events = perm_holder.get_events_with_permission('can_view_orders', request=self.request).filter( organizer=self.request.organizer ) responses = register_multievent_data_exporters.send(self.request.organizer)