Better permission for /api/counter/search/detailed

This commit is contained in:
imperosol committed 2026-11-06 13:32:24 +01:00
1 parent c33ec9bff9
commit fef5f519c6
1 file changed
+2 -2
+2 -2
View File
@@ -22,7 +22,7 @@ from ninja_extra.pagination import PageNumberPaginationExtra
from ninja_extra.schemas import PaginatedResponseSchema from ninja_extra.schemas import PaginatedResponseSchema
from api.auth import ApiKeyAuth from api.auth import ApiKeyAuth
from api.permissions import CanAccessLookup, CanView, IsInGroup, IsRoot from api.permissions import CanAccessLookup, CanView, HasPerm, IsInGroup, IsRoot
from counter.models import Counter, Product, ProductType from counter.models import Counter, Product, ProductType
from counter.schemas import ( from counter.schemas import (
CounterFilterSchema, CounterFilterSchema,
@@ -93,7 +93,7 @@ class ProductController(ControllerBase):
@route.get( @route.get(
"/search/detailed", "/search/detailed",
response=PaginatedResponseSchema[ProductSchema], response=PaginatedResponseSchema[ProductSchema],
permissions=[IsCounterAdmin], permissions=[HasPerm("counter.view_product")],
url_name="search_products_detailed", url_name="search_products_detailed",
) )
@paginate(PageNumberPaginationExtra, page_size=50) @paginate(PageNumberPaginationExtra, page_size=50)