Use whitelist for picture identifications

This commit is contained in:
imperosol
2026-03-20 18:22:14 +01:00
parent 22e1801c59
commit 93b6ff327d

View File

@@ -270,7 +270,11 @@ class PeoplePictureRelationQuerySet(models.QuerySet):
if user.is_root or user.is_in_group(pk=settings.SITH_GROUP_SAS_ADMIN_ID): if user.is_root or user.is_in_group(pk=settings.SITH_GROUP_SAS_ADMIN_ID):
return self return self
if user.was_subscribed: if user.was_subscribed:
return self.filter(Q(user_id=user.id) | Q(user__is_viewable=True)) return self.filter(
Q(user_id=user.id)
| Q(user__is_viewable=True)
| Q(user__whitelisted_users=user)
)
return self.filter(user_id=user.id) return self.filter(user_id=user.id)