From 37ddf78fe5cd0d1c61e8fcd5d1b18bf18f97eeea Mon Sep 17 00:00:00 2001
From: "J.-S. Caux" <J.S.Caux@uva.nl>
Date: Thu, 9 Jul 2020 17:21:40 +0200
Subject: [PATCH] Debug subsidy att view for anonymous users; resolves
SCIPOST-GY
---
finances/views.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/finances/views.py b/finances/views.py
index 1673f9534..0cca61da4 100644
--- a/finances/views.py
+++ b/finances/views.py
@@ -291,7 +291,7 @@ def subsidy_attachment_toggle_public_visibility(request, attachment_id):
def subsidy_attachment(request, subsidy_id, attachment_id):
attachment = get_object_or_404(SubsidyAttachment.objects,
subsidy__id=subsidy_id, id=attachment_id)
- if not attachment.visible_to_user(request.user):
+ if not (request.user.is_authenticated and attachment.visible_to_user(request.user)):
raise PermissionDenied
content_type, encoding = mimetypes.guess_type(attachment.attachment.path)
content_type = content_type or 'application/octet-stream'
--
GitLab