Compare commits

...

2 Commits

Author SHA1 Message Date
Raphael Michel
31d84415b5 Bump version to 2026.2.1 2026-04-08 13:59:57 +02:00
Raphael Michel
fca335020a [SECURITY] API: Add missing event filter for check-ins 2026-04-08 13:59:42 +02:00
2 changed files with 2 additions and 2 deletions

View File

@@ -19,4 +19,4 @@
# You should have received a copy of the GNU Affero General Public License along with this program. If not, see
# <https://www.gnu.org/licenses/>.
#
__version__ = "2026.2.0"
__version__ = "2026.2.1"

View File

@@ -1121,7 +1121,7 @@ class CheckinViewSet(viewsets.ReadOnlyModelViewSet):
permission = 'can_view_orders'
def get_queryset(self):
qs = Checkin.all.filter().select_related(
qs = Checkin.all.filter(list__event=self.request.event).select_related(
"position",
"device",
)