From 7116dd4a084a70e39b7756935e8c9d26e8650756 Mon Sep 17 00:00:00 2001 From: Martin Gross Date: Fri, 25 Jul 2025 11:15:16 +0200 Subject: [PATCH] API/Organizer: Allow Device-Token access to Organizer settings; expose mf0aes_random_uid --- src/pretix/api/serializers/organizer.py | 1 + src/pretix/api/views/organizer.py | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/src/pretix/api/serializers/organizer.py b/src/pretix/api/serializers/organizer.py index b2ead95945..58deb71dc6 100644 --- a/src/pretix/api/serializers/organizer.py +++ b/src/pretix/api/serializers/organizer.py @@ -484,6 +484,7 @@ class OrganizerSettingsSerializer(SettingsSerializer): 'reusable_media_type_nfc_mf0aes', 'reusable_media_type_nfc_mf0aes_autocreate_giftcard', 'reusable_media_type_nfc_mf0aes_autocreate_giftcard_currency', + 'reusable_media_type_nfc_mf0aes_random_uid', ] def __init__(self, *args, **kwargs): diff --git a/src/pretix/api/views/organizer.py b/src/pretix/api/views/organizer.py index 3bfe0e57a3..bf73d51cd7 100644 --- a/src/pretix/api/views/organizer.py +++ b/src/pretix/api/views/organizer.py @@ -546,7 +546,8 @@ class DeviceViewSet(mixins.CreateModelMixin, class OrganizerSettingsView(views.APIView): - permission = 'can_change_organizer_settings' + permission = None + write_permission = 'can_change_organizer_settings' def get(self, request, *args, **kwargs): s = OrganizerSettingsSerializer(instance=request.organizer.settings, organizer=request.organizer, context={