CGM_Public/pretix_original
2
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-05-07 15:34:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix ineffective permission check in typeahead

Browse Source
This commit is contained in:
Raphael Michel
2019-06-19 09:32:30 +02:00
parent 7adf203863
commit acfec59abc
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/pretix/control/views/typeahead.py
View File

@@ -169,7 +169,7 @@ def nav_context_list(request):
qs_vouchers = Voucher.objects.filter(code__icontains=query).select_related('event', 'event__organizer') qs_vouchers = Voucher.objects.filter(code__icontains=query).select_related('event', 'event__organizer')
if not request.user.has_active_staff_session(request.session.session_key): if not request.user.has_active_staff_session(request.session.session_key):
qs_orders = qs_orders.filter( qs_vouchers = qs_vouchers.filter(
Q(event__organizer_id__in=request.user.teams.filter( Q(event__organizer_id__in=request.user.teams.filter(
all_events=True, can_view_vouchers=True).values_list('organizer', flat=True)) all_events=True, can_view_vouchers=True).values_list('organizer', flat=True))
| Q(event_id__in=request.user.teams.filter( | Q(event_id__in=request.user.teams.filter(