diff --git a/src/pretix/control/views/dashboards.py b/src/pretix/control/views/dashboards.py index 02bddc996..fb3a6cdb4 100644 --- a/src/pretix/control/views/dashboards.py +++ b/src/pretix/control/views/dashboards.py @@ -414,9 +414,12 @@ def event_index_widgets_lazy(request, organizer, event): except SubEvent.DoesNotExist: pass + can_view_orders = request.user.has_event_permission(request.organizer, request.event, 'event.orders:read', + request=request) widgets = [] - for r, result in event_dashboard_widgets.send(sender=request.event, subevent=subevent, lazy=False): - widgets.extend(result) + if can_view_orders: + for r, result in event_dashboard_widgets.send(sender=request.event, subevent=subevent, lazy=False): + widgets.extend(result) return JsonResponse({'widgets': widgets})