From b6701825c7316c2ef2271c2fd6a32c6a8a7204d8 Mon Sep 17 00:00:00 2001
From: magicfelix <felix@felix-zauberer.de>
Date: Tue, 12 Sep 2023 19:20:51 +0200
Subject: [PATCH] Return only documentations a user is allowed to view
---
aleksis/apps/alsijil/schema/documentation.py | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/aleksis/apps/alsijil/schema/documentation.py b/aleksis/apps/alsijil/schema/documentation.py
index a5698442f..d8d5911a2 100644
--- a/aleksis/apps/alsijil/schema/documentation.py
+++ b/aleksis/apps/alsijil/schema/documentation.py
@@ -1,3 +1,5 @@
+from django.core.exceptions import PermissionDenied
+
import graphene
from calendarweek import CalendarWeek
from graphene_django import DjangoListField
@@ -28,6 +30,10 @@ class DocumentationType(PermissionsTypeMixin, DjangoFilterMixin, DjangoObjectTyp
"course__name": ["exact"],
}
+ @classmethod
+ def get_queryset(cls, queryset, info):
+ return get_objects_for_user(info.context.user, "alsijil.view_documentation", queryset)
+
class DocumentationCreateMutation(DjangoCreateMutation):
class Meta:
--
GitLab