From 0f2ebb8687e56ce3fd3961d5480968af14c283e1 Mon Sep 17 00:00:00 2001 From: Martin Gross Date: Tue, 14 Apr 2026 17:02:47 +0200 Subject: [PATCH] PPv2: Fix permission-check for ISU (event.settings.general:write to event.settings.payment:write) --- src/pretix/plugins/paypal2/views.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/pretix/plugins/paypal2/views.py b/src/pretix/plugins/paypal2/views.py index 7edf796bff..b1dac86b65 100644 --- a/src/pretix/plugins/paypal2/views.py +++ b/src/pretix/plugins/paypal2/views.py @@ -216,7 +216,7 @@ class PayView(PaypalOrderView, TemplateView): @scopes_disabled() -@event_permission_required('event.settings.general:write') +@event_permission_required('event.settings.payment:write') def isu_return(request, *args, **kwargs): getparams = ['merchantId', 'merchantIdInPayPal', 'permissionsGranted', 'accountStatus', 'consentStatus', 'productIntentID', 'isEmailConfirmed'] sessionparams = ['payment_paypal_isu_event', 'payment_paypal_isu_tracking_id'] @@ -526,7 +526,7 @@ def webhook(request, *args, **kwargs): return HttpResponse(status=200) -@event_permission_required('event.settings.general:write') +@event_permission_required('event.settings.payment:write') @require_POST def isu_disconnect(request, **kwargs): del request.event.settings.payment_paypal_connect_refresh_token