bugfix: restriction delete lot by the owner

2021-06-02 10:11:20 +02:00 · 2021-06-02 10:11:20 +02:00 · 20e029b359
parent 57c9269907
commit 20e029b359
1 changed files with 1 additions and 1 deletions
--- a/ereuse_devicehub/resources/lot/views.py
+++ b/ereuse_devicehub/resources/lot/views.py
@ -109,7 +109,7 @@ class LotView(View):
        return query

    def delete(self, id):
-        lot = Lot.query.filter_by(id=id,).one()
+        lot = Lot.query.filter_by(id=id, owner=g.user).one()
        lot.delete()
        db.session.commit()
        return Response(status=204)