mirror of
https://github.com/paperless-ngx/paperless-ngx.git
synced 2026-08-04 01:52:18 +00:00
Guardian's UserObjectPermission/GroupObjectPermission always store a bare codename, but has_perm()-style callers commonly pass the qualified "app_label.codename" form. Passing that qualified form here previously matched zero rows, silently under-permitting. content_type already disambiguates the codename, so just strip any prefix instead. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>