Proper permission handling and testing

2026-05-05 15:14:04 +00:00 · 2018-09-25 12:29:05 +02:00
parent 23fdf8c457
commit 63ba393c12
3 changed files with 89 additions and 37 deletions
--- a/src/pretix/base/models/devices.py
+++ b/src/pretix/base/models/devices.py
@@ -85,10 +85,8 @@ class Device(LoggedModel):

    def permission_set(self) -> set:
        return {
-            'can_change_items',  # TODO: Remove, after read operations are allowed without
            'can_view_orders',
            'can_change_orders',
-            'can_view_vouchers',  # TODO: Really required
        }

    def get_event_permission_set(self, organizer, event) -> set: