public/coins-demo
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Get task_list before checking for groups

Browse source
This commit is contained in:
Scot Hacker 2018-03-16 00:24:58 -07:00
parent 439689b32e
commit 7e0435a948
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
todo/views.py
View file

@ -106,9 +106,9 @@ def list_detail(request, list_id=None, list_slug=None, view_completed=False):
else:
# Show a specific list, ensuring permissions.
task_list = get_object_or_404(TaskList, id=list_id)
if task_list.group not in request.user.groups.all() and not request.user.is_staff:
raise PermissionDenied
task_list = get_object_or_404(TaskList, id=list_id)
items = Item.objects.filter(task_list=task_list.id)
# Additional filtering