From b6fc8a9331972a9bb9fb8bd47961833cc134b6d3 Mon Sep 17 00:00:00 2001
From: Andre Anjos <andre.anjos@idiap.ch>
Date: Fri, 20 May 2016 10:38:15 +0200
Subject: [PATCH] [experiments] Fixed permission querying for databases in
experiments
---
beat/web/experiments/permissions.py | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/beat/web/experiments/permissions.py b/beat/web/experiments/permissions.py
index 40133b879..bbc04aa65 100644
--- a/beat/web/experiments/permissions.py
+++ b/beat/web/experiments/permissions.py
@@ -37,6 +37,6 @@ class IsDatabaseAccessible(permissions.BasePermission):
def has_object_permission(self, request, view, obj):
accessible_databases = Database.objects.for_user(request.user, True)
- experiment_databases = Database.objects.filter(protocols__sets=obj.referenced_datasets.all()).distinct()
+ experiment_databases = Database.objects.filter(protocols__sets__in=obj.referenced_datasets.all()).distinct()
return all(experiment_db in accessible_databases for experiment_db in experiment_databases)
--
GitLab