From 251cd1da6cad0aafc51ff424ae7e3cb0655fff20 Mon Sep 17 00:00:00 2001
From: swannbm <swann.bouviermuller@gmail.com>
Date: Fri, 7 Dec 2018 22:02:59 +0100
Subject: [PATCH] Correction of #57
---
djangoldp/views.py | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/djangoldp/views.py b/djangoldp/views.py
index b5637354..b4ae8602 100644
--- a/djangoldp/views.py
+++ b/djangoldp/views.py
@@ -50,8 +50,12 @@ class AnnonReadOnly(WACPermissions):
class DjangoObjectPermissionsFilter(BaseFilterBackend):
def filter_queryset(self, request, queryset, view):
+ """
+ Ensure that queryset only contains objects visible by current user
+ """
perm="view_{}".format(queryset.model._meta.model_name.lower())
- return get_objects_for_user(request.user, perm, klass=queryset.model)
+ objects = get_objects_for_user(request.user, perm, klass=queryset)
+ return objects
class LDPViewSetGenerator(ModelViewSet):
"""An extension of ModelViewSet that generates automatically URLs for the model"""
--
GitLab