rsw/score
1
0
Fork 0
Code Issues 2 Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Correct read events rights

Browse Source
This commit is contained in:
Sebastiaan
2025-06-09 17:01:37 +02:00
parent bf3fa03db0
commit 9bc19e6a68
3 changed files with 93 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
backend/app/api/routes/events.py
View File

@@ -51,17 +51,19 @@ def read_events(
count_statement = (
select(func.count())
.select_from(Event)
.join(EventUserLink) # Join with EventUserLink to check user permissions
.where(
EventUserLink.user_id == current_user.id,
(EventUserLink.rights & PermissionRight.READ) == PermissionRight.READ,
# FIXME: (EventUserLink.rights & PermissionRight.READ) == PermissionRight.READ,
)
)
count = session.exec(count_statement).one()
statement = (
select(Event)
.join(EventUserLink) # Join with EventUserLink to check user permissions
.where(
EventUserLink.user_id == current_user.id,
(EventUserLink.rights & PermissionRight.READ) == PermissionRight.READ,
# FIXME: (EventUserLink.rights & PermissionRight.READ) == PermissionRight.READ,
)
.offset(skip)
.limit(limit)