From fa48e55f0f18f8c2f268bc23e016d40e2c6c43ec Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Fri, 16 Apr 2021 17:07:59 +0200 Subject: [PATCH] Allow pretixPOS to access more API endpoints --- src/pretix/api/auth/devicesecurity.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/pretix/api/auth/devicesecurity.py b/src/pretix/api/auth/devicesecurity.py index 103f929b06..9a9bc2bae5 100644 --- a/src/pretix/api/auth/devicesecurity.py +++ b/src/pretix/api/auth/devicesecurity.py @@ -122,12 +122,17 @@ class PretixPosSecurityProfile(AllowListSecurityProfile): ('POST', 'api-v1:order-list'), ('GET', 'api-v1:order-detail'), ('DELETE', 'api-v1:orderposition-detail'), + ('PATCH', 'api-v1:orderposition-detail'), + ('GET', 'api-v1:orderposition-answer'), ('GET', 'api-v1:orderposition-pdf_image'), ('POST', 'api-v1:order-mark-canceled'), ('POST', 'api-v1:orderpayment-list'), ('POST', 'api-v1:orderrefund-list'), ('POST', 'api-v1:orderrefund-done'), ('POST', 'api-v1:cartposition-list'), + ('GET', 'api-v1:checkinlist-list'), + ('POST', 'api-v1:checkinlistpos-redeem'), + ('POST', 'plugins:pretix_posbackend:order.posprintlog'), ('DELETE', 'api-v1:cartposition-detail'), ('GET', 'api-v1:giftcard-list'), ('POST', 'api-v1:giftcard-transact'),