From cb2a0b7ab9c61360da01a1fb63583d9bda597c71 Mon Sep 17 00:00:00 2001 From: Ernesto Rico Schmidt <ernesto@helsinki.at> Date: Wed, 14 Feb 2024 18:12:13 -0400 Subject: [PATCH] fix: test if user is in all() of the owners --- program/serializers.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/program/serializers.py b/program/serializers.py index 06286f88..73d64152 100644 --- a/program/serializers.py +++ b/program/serializers.py @@ -1027,7 +1027,7 @@ class NoteSerializer(serializers.ModelSerializer): user = self.context.get("request").user # user_is_privileged = user.groups.filter(name=settings.PRIVILEGED_GROUP).exists() - user_is_owner = user in instance.timeslot.schedule.show.owners + user_is_owner = user in instance.timeslot.schedule.show.owners.all() # Only superusers and owners of a show are allowed to update a note # Being a privileged user overrides the ownership -- GitLab