lgcosta/paperless-ngx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Respect model perms for global search

Browse Source
This commit is contained in:
shamoon 2024-03-31 21:47:10 -07:00
parent 9004000c1a
commit 6e6454e597
1 changed files with 79 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

61
src/documents/views.py
View File

@ -1111,6 +1111,7 @@ class GlobalSearchView(PassUserMixin):
return HttpResponseBadRequest("Query must be at least 3 characters") return HttpResponseBadRequest("Query must be at least 3 characters")
docs = [] docs = []
if request.user.has_perm("documents.view_document"):
from documents import index from documents import index
with index.open_index_searcher() as s: with index.open_index_searcher() as s:
@ -1127,30 +1128,70 @@ class GlobalSearchView(PassUserMixin):
Document, Document,
).filter(id__in=[r["id"] for r in results]) ).filter(id__in=[r["id"] for r in results])
tags = get_objects_for_user_owner_aware(request.user, "view_tag", Tag).filter( tags = (
get_objects_for_user_owner_aware(request.user, "view_tag", Tag).filter(
name__contains=query, name__contains=query,
)[:3] )[:3]
correspondents = get_objects_for_user_owner_aware( if request.user.has_perm("documents.view_tag")
else []
)
correspondents = (
get_objects_for_user_owner_aware(
request.user, request.user,
"view_correspondent", "view_correspondent",
Correspondent, Correspondent,
).filter(name__contains=query)[:3] ).filter(name__contains=query)[:3]
document_types = get_objects_for_user_owner_aware( if request.user.has_perm("documents.view_correspondent")
else []
)
document_types = (
get_objects_for_user_owner_aware(
request.user, request.user,
"view_documenttype", "view_documenttype",
DocumentType, DocumentType,
).filter(name__contains=query)[:3] ).filter(name__contains=query)[:3]
storage_paths = get_objects_for_user_owner_aware( if request.user.has_perm("documents.view_documenttype")
else []
)
storage_paths = (
get_objects_for_user_owner_aware(
request.user, request.user,
"view_storagepath", "view_storagepath",
StoragePath, StoragePath,
).filter(name__contains=query)[:3] ).filter(name__contains=query)[:3]
users = User.objects.filter(username__contains=query)[:3] if request.user.has_perm("documents.view_storagepath")
groups = Group.objects.filter(name__contains=query)[:3] else []
mail_rules = MailRule.objects.filter(name__contains=query)[:3] )
mail_accounts = MailAccount.objects.filter(name__contains=query)[:3] users = (
workflows = Workflow.objects.filter(name__contains=query)[:3] User.objects.filter(username__contains=query)[:3]
custom_fields = CustomField.objects.filter(name__contains=query)[:3] if request.user.has_perm("documents.view_user")
else []
)
groups = (
Group.objects.filter(name__contains=query)[:3]
if request.user.has_perm("documents.view_group")
else []
)
mail_rules = (
MailRule.objects.filter(name__contains=query)[:3]
if request.user.has_perm("documents.view_mailrule")
else []
)
mail_accounts = (
MailAccount.objects.filter(name__contains=query)[:3]
if request.user.has_perm("documents.view_mailaccount")
else []
)
workflows = (
Workflow.objects.filter(name__contains=query)[:3]
if request.user.has_perm("documents.view_workflow")
else []
)
custom_fields = (
CustomField.objects.filter(name__contains=query)[:3]
if request.user.has_perm("documents.view_customfield")
else []
)
context = { context = {
"request": request, "request": request,