lgcosta/paperless-ngx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update PaperlessAdminPermissions check

Browse Source
This commit is contained in:
shamoon 2024-04-12 15:45:58 -07:00
parent 865e8105c6
commit 7e9975ee34
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/documents/permissions.py
View File

@ -40,7 +40,7 @@ class PaperlessObjectPermissions(DjangoObjectPermissions):
class PaperlessAdminPermissions(BasePermission): class PaperlessAdminPermissions(BasePermission):
def has_permission(self, request, view): def has_permission(self, request, view):
return request.user.has_perm("admin.view_logentry") return request.user.is_staff
def get_groups_with_only_permission(obj, codename): def get_groups_with_only_permission(obj, codename):

1
src/documents/tests/test_api_permissions.py
View File

@ -131,6 +131,7 @@ class TestApiAuth(DirectoriesMixin, APITestCase):
def test_api_sufficient_permissions(self): def test_api_sufficient_permissions(self):
user = User.objects.create_user(username="test") user = User.objects.create_user(username="test")
user.user_permissions.add(*Permission.objects.all()) user.user_permissions.add(*Permission.objects.all())
user.is_staff = True
self.client.force_authenticate(user) self.client.force_authenticate(user)
Document.objects.create(title="Test") Document.objects.create(title="Test")