Als Mitglied möchte ich anhand meiner Rechte Daten ändern können oder daran gehindert werden #198 #199
@ -55,9 +55,9 @@ class QueryABC(ObjectType):
|
||||
if user == "system" or user.auth_role == AuthRoleEnum.admin:
|
||||
return self._resolve_collection(collection, *args, **kwargs)
|
||||
|
||||
for x in collection:
|
||||
for x in collection.to_list():
|
||||
if not self._can_user_see_element(user, x):
|
||||
return List()
|
||||
collection.remove(x)
|
||||
|
||||
return self._resolve_collection(collection, *args, **kwargs)
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user