From 7b70e103f8ac4e82b4511a53fb08dc37b3131fb4 Mon Sep 17 00:00:00 2001 From: Valentin Rigal <rigal@teklia.com> Date: Wed, 16 Dec 2020 11:19:17 +0100 Subject: [PATCH] Fixes --- arkindex/project/mixins.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/arkindex/project/mixins.py b/arkindex/project/mixins.py index 41ba1a4ff3..3bde7174d0 100644 --- a/arkindex/project/mixins.py +++ b/arkindex/project/mixins.py @@ -20,6 +20,8 @@ class ACLMixin(object): """ Access control mixin using the generic Right table. """ + _user = None + def __init__(self, user=None): self._user = user @@ -33,7 +35,9 @@ class ACLMixin(object): # Handle special authentications if level <= Role.Guest.value and getattr(instance, 'public', False): return True - if self.user.is_admin or self.user.is_internal: + if self.user.is_anonymous: + return False + elif self.user.is_admin or self.user.is_internal: return True return instance.memberships.filter( -- GitLab