ereuse
/
devicehub-django
7
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

fix delete token. only user tokens allowed

This commit is contained in:
Cayo Puigdefabregas 2024-09-20 14:30:31 +02:00
parent 2f4a85f79b
commit f5f0ea3c35
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/views.py
View File

@ -99,7 +99,7 @@ class TokenDeleteView(DashboardView, DeleteView):
def get(self, request, *args, **kwargs): def get(self, request, *args, **kwargs):
self.pk = kwargs['pk'] self.pk = kwargs['pk']
self.object = get_object_or_404(self.model, pk=self.pk) self.object = get_object_or_404(self.model, pk=self.pk, owner=self.request.user)
self.object.delete() self.object.delete()
return redirect('api:tokens') return redirect('api:tokens')