Fix permissions check on transcode jobs

cvisionai · Nov 24, 2024 · d1e384c · d1e384c
1 parent f144017
commit d1e384c
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 5 deletions.
diff --git a/api/main/rest/_fine_grain_permissions.py b/api/main/rest/_fine_grain_permissions.py
@@ -54,11 +54,11 @@ def has_permission(self, request, view):
             if project is None:
                 raise Http404
         elif "uid" in view.kwargs:
-            uid = view.kwargs["uid"]
-            jobs = get_jobs(f"uid={uid}")
-            if len(jobs) == 0:
-                raise Http404
-            project = get_object_or_404(Project, pk=_job_project(jobs[0]))
+            # Have to get the object to know its project
+            job = view._get(view.params)
+            if "job" in job:
+                job = job["job"]
+            project = get_object_or_404(Project, pk=job["project"])
         elif "elemental_id" in view.kwargs:
             elemental_id = view.kwargs["elemental_id"]
 

diff --git a/api/main/rest/_legacy_permissions.py b/api/main/rest/_legacy_permissions.py
@@ -56,6 +56,8 @@ def has_permission(self, request, view):
         elif "uid" in view.kwargs:
             # Have to get the object to know its project
             job = view._get(view.params)
+            if "job" in job:
+                job = job["job"]
             project = get_object_or_404(Project, pk=job["project"])
         elif "elemental_id" in view.kwargs:
             elemental_id = view.kwargs["elemental_id"]