lkva/NDOJ
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix blog permissions

Browse source
This commit is contained in:
cuom1999 2022-05-30 23:35:30 -05:00
parent 9f43e712d0
commit eaa7be6ec6
3 changed files with 10 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

9
judge/views/blog.py
View file

@ -99,11 +99,10 @@ class PostList(FeedView):
.order_by("-sticky", "-publish_on")
.prefetch_related("authors__user", "organizations")
)
if not self.request.user.has_perm("judge.edit_all_post"):
filter = Q(is_organization_private=False)
if self.request.user.is_authenticated:
filter |= Q(organizations__in=self.request.profile.organizations.all())
queryset = queryset.filter(filter)
filter = Q(is_organization_private=False)
if self.request.user.is_authenticated:
filter |= Q(organizations__in=self.request.profile.organizations.all())
queryset = queryset.filter(filter)
return queryset
def get_context_data(self, **kwargs):