sarlink/sarlinkportal-api
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(views): update user queryset logic to filter out superusers for non-admins 🔨

Browse Source
This commit is contained in:
i701
2025-07-11 15:10:01 +05:00
parent 596ce510c7
commit 72c2ea1ecc
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/views.py
+3 -3
View File
@@ -352,9 +352,9 @@ class ListUserView(StaffEditorPermissionMixin, generics.ListAPIView):
def get_queryset(self): def get_queryset(self):
user = self.request.user user = self.request.user
if user.is_authenticated and user.is_staff: if user.is_authenticated and getattr(user, "is_admin"):
return User.objects.all() return User.objects.filter(is_superuser=False)
return User.objects.filter(is_staff=False) return User.objects.none()
class UserVerifyAPIView(StaffEditorPermissionMixin, generics.UpdateAPIView): class UserVerifyAPIView(StaffEditorPermissionMixin, generics.UpdateAPIView):