amorfo77/paperless-ngx
1
0
Fork 0
mirror of https://github.com/paperless-ngx/paperless-ngx.git synced 2026-08-02 00:52:20 +00:00
Code Issues Projects Releases Wiki Activity

Fix: enforce current permissions in autocomplete

Browse Source
This commit is contained in:
shamoon
2026-07-21 16:03:22 -07:00
parent 80210bd3bf
commit 7bfaa86c7c
6 changed files with 119 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/documents/tests/test_api_permissions.py
+4
View File
@@ -131,6 +131,10 @@ class TestApiAuth(DirectoriesMixin, APITestCase):
self.client.get("/api/saved_views/").status_code,
status.HTTP_403_FORBIDDEN,
)
self.assertEqual(
self.client.get("/api/search/autocomplete/?term=test").status_code,
status.HTTP_403_FORBIDDEN,
)
def test_api_sufficient_permissions(self) -> None:
user = User.objects.create_user(username="test")