CGM_Public/pretix_cgo
1
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

[SECURITY] API: Add missing event filter for check-ins

Browse Source
This commit is contained in:
Raphael Michel
2026-04-05 14:42:53 +02:00
committed by Raphael Michel
parent 787db18d72
commit fca335020a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/pretix/api/views/checkin.py
View File

@@ -1121,7 +1121,7 @@ class CheckinViewSet(viewsets.ReadOnlyModelViewSet):
permission = 'can_view_orders'
def get_queryset(self):
qs = Checkin.all.filter().select_related(
qs = Checkin.all.filter(list__event=self.request.event).select_related(
"position",
"device",
)