Bump to 2.8.1

[SECURITY] Do not allow to enumerate organizers
2025-12-05 21:32:28 +00:00 · 2019-06-05 16:28:12 +02:00 · 2019-06-05 16:28:03 +02:00
2 changed files with 10 additions and 5 deletions
--- a/src/pretix/init.py
+++ b/src/pretix/init.py
@@ -1 +1 @@
-__version__ = "2.8.0"
+__version__ = "2.8.1"
--- a/src/pretix/control/views/typeahead.py
+++ b/src/pretix/control/views/typeahead.py
@@ -149,10 +149,15 @@ def nav_context_list(request):
    ]

    if show_user and organizer:
-        organizer = serialize_orga(Organizer.objects.get(pk=organizer))
-        if organizer in results:
-            results.remove(organizer)
-        results.insert(1, organizer)
+        try:
+            organizer = serialize_orga(Organizer.objects.get(pk=organizer))
+        except Organizer.DoesNotExist:
+            pass
+        else:
+            if request.user.has_organizer_permission(organizer, request):
+                if organizer in results:
+                    results.remove(organizer)
+                results.insert(1, organizer)

    doc = {
        'results': results,
Author	SHA1	Message	Date
Raphael Michel	750cd4839c	Bump to 2.8.1	2019-06-05 16:28:12 +02:00
Raphael Michel	4fb6f6ab7d	[SECURITY] Do not allow to enumerate organizers	2019-06-05 16:28:03 +02:00