sanspie/akarpov
1
1
Fork 0
mirror of https://github.com/Alexander-D-Karpov/akarpov synced 2024-11-10 21:56:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

bug fixes

Browse Source
This commit is contained in:
Alexander Karpov 2024-04-07 23:05:25 +03:00
parent e9dcccbced
commit 709bda158a
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
akarpov/music/api/views.py
View File

@ -400,9 +400,10 @@ def post(self, request, *args, **kwargs):
try:
user_id = self.request.data.get("user_id", None)
user = User.objects.get(id=user_id)
if user != self.request.user:
return Response(status=403)
if user_id:
user = User.objects.cache().get(id=user_id)
if user != self.request.user:
return Response(status=403)
except User.DoesNotExist:
...