Commit 8fb321ca authored by juga's avatar juga
Browse files

Merge branch '85_missing_notes' into 'main' 

Use session user to check permissions

See merge request tpo/tpa/anon_ticket!127
parents e2f8f7d8 901b760a

anonticket/views.py

+1 −1
Original line number Diff line number Diff line
@@ -892,7 +892,7 @@ class PendingNoteDetailView(PassUserIdentifierMixin, PermissionRequiredMixin, De 
    template_name = 'anonticket/note_pending.html'



    def has_permission(self):

        user_identifier = self.kwargs.get('user_identifier', None)

        user_identifier = self.request.session['user_identifier']

        note = self.get_object()

        is_superuser = self.request.user.is_superuser