From 5f309f54798b1a7a0fe6ef8060a8c9a77b3b6d04 Mon Sep 17 00:00:00 2001 From: Andrea Lepori Date: Sat, 14 Aug 2021 11:38:40 +0200 Subject: fix RO documents visible for non group capi --- client/views.py | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) (limited to 'client') diff --git a/client/views.py b/client/views.py index 73a252a..d18c074 100644 --- a/client/views.py +++ b/client/views.py @@ -41,15 +41,14 @@ def index(request): context = {"user_code": user_code} else: # get user group - group = request.user.groups.values_list('name', flat=True)[0] + groups = request.user.groups.values_list('name', flat=True) + group = groups[0] # get group settings settings = GroupSettings.objects.filter(group__name=group) - # check if settings exists - if len(settings) == 0: - group_view = False - else: + # check if settings exists and user is in group capi + if len(settings) != 0 and "capi" in groups: # set settings value group_view = settings[0].view_documents -- cgit v1.2.1