From 817c02c667abd47c24f4f96db4369b47637e92c5 Mon Sep 17 00:00:00 2001 From: ibuler Date: Fri, 10 Sep 2021 17:56:10 +0800 Subject: [PATCH] =?UTF-8?q?fix:=20=E4=BF=AE=E5=A4=8Dis=5Fapp=20bug?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- apps/common/permissions.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/apps/common/permissions.py b/apps/common/permissions.py index b0f217c1c..750a41475 100644 --- a/apps/common/permissions.py +++ b/apps/common/permissions.py @@ -33,6 +33,8 @@ class IsSuperUser(IsValidUser): class IsSuperUserOrAppUser(IsSuperUser): def has_permission(self, request, view): + if request.user.is_anonymous: + return False return super(IsSuperUserOrAppUser, self).has_permission(request, view) \ or request.user.is_app @@ -67,6 +69,8 @@ class IsOrgAdminOrAppUser(IsValidUser): def has_permission(self, request, view): if not current_org: return False + if request.user.is_anonymous: + return False return super(IsOrgAdminOrAppUser, self).has_permission(request, view) \ and (current_org.can_admin_by(request.user) or request.user.is_app)