Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
thalia
concrexit
Commits
a39bc455
Commit
a39bc455
authored
Sep 20, 2017
by
Gijs Hendriksen
Browse files
Fixed issue where /orders/me/ still allowed you to update an already paid order
parent
52424010
Changes
1
Hide whitespace changes
Inline
Side-by-side
website/pizzas/api/viewsets.py
View file @
a39bc455
...
...
@@ -73,7 +73,7 @@ class OrderViewset(ModelViewSet):
def
get_object
(
self
):
if
self
.
kwargs
[
self
.
lookup_field
]
==
'me'
:
order
=
get_object_or_404
(
Order
,
order
=
get_object_or_404
(
self
.
get_queryset
()
,
member
=
self
.
request
.
user
.
member
,
pizza_event
=
PizzaEvent
.
current
())
self
.
check_object_permissions
(
self
.
request
,
order
)
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment