Check permissions on webnotifications list

stable
Álex Hermida 2018-11-28 08:01:38 +01:00 committed by Miguel Gonzalez
parent 49520bcc9b
commit 0e1105fb2b
1 changed files with 3 additions and 0 deletions

View File

@ -65,6 +65,9 @@ class WebNotificationsViewSet(GenericViewSet):
request.user.pk == obj.user_id request.user.pk == obj.user_id
def list(self, request): def list(self, request):
if self.request.user.is_anonymous():
return response.Ok({})
queryset = models.WebNotification.objects\ queryset = models.WebNotification.objects\
.filter(user=self.request.user) .filter(user=self.request.user)