Fix: re-use permitted_object_ids

2026-09-02 16:07:15 +00:00 · 2026-09-01 07:45:47 -07:00
parent 85e192f935
commit bfe8213b78
3 changed files with 37 additions and 1 deletions
@@ -635,7 +635,9 @@ class TagViewSet(PermissionsAwareDocumentCountMixin, ModelViewSet[Tag]):
                annotate_document_count_for_related_queryset(
                    Tag.objects.filter(
                        pk__in=descendant_pks | {t.pk for t in all_tags},
-                    ).select_related("owner"),
+                    )
+                    .filter(pk__in=permitted_object_ids(user, Tag, "view_tag"))
+                    .select_related("owner"),
                    through_model=self.document_count_through,
                    related_object_field=self._get_document_count_source_field(),
                    user=user,