From 099dcb81244f77967591ed0c20f20d62c68333b5 Mon Sep 17 00:00:00 2001 From: martinjrobins Date: Wed, 10 Jan 2024 16:46:52 +0000 Subject: [PATCH] #332 superuser only gets own projects via api --- pkpdapp/pkpdapp/api/views/filters.py | 3 --- 1 file changed, 3 deletions(-) diff --git a/pkpdapp/pkpdapp/api/views/filters.py b/pkpdapp/pkpdapp/api/views/filters.py index 11d646ef..dd0d53f1 100644 --- a/pkpdapp/pkpdapp/api/views/filters.py +++ b/pkpdapp/pkpdapp/api/views/filters.py @@ -31,9 +31,6 @@ class UserAccessFilter(filters.BaseFilterBackend): """ def filter_queryset(self, request, queryset, view): - if request.user.is_superuser: - return queryset - user = request.user if queryset.model == Project: queryset = queryset.filter(users=user)