forked from CGM_Public/pretix_original
API: Fix insufficient permission check
This commit is contained in:
@@ -178,6 +178,7 @@ class CheckinListPositionViewSet(viewsets.ReadOnlyModelViewSet):
|
|||||||
|
|
||||||
filter_class = CheckinOrderPositionFilter
|
filter_class = CheckinOrderPositionFilter
|
||||||
permission = 'can_view_orders'
|
permission = 'can_view_orders'
|
||||||
|
write_permission = 'can_change_orders'
|
||||||
|
|
||||||
@cached_property
|
@cached_property
|
||||||
def checkinlist(self):
|
def checkinlist(self):
|
||||||
|
|||||||
Reference in New Issue
Block a user