diff --git a/docmanager_backend/accounts/permissions.py b/docmanager_backend/accounts/permissions.py index 6a934f8..babbfd4 100644 --- a/docmanager_backend/accounts/permissions.py +++ b/docmanager_backend/accounts/permissions.py @@ -19,7 +19,7 @@ class IsPlanning(BasePermission): """ def has_permission(self, request, view): - return bool(request.user and request.user.role in ("planning", "admin")) + return bool(request.user and request.user.role in ("planning", "admin", "head", "staff")) class IsHead(BasePermission): diff --git a/docmanager_backend/questionnaires/views.py b/docmanager_backend/questionnaires/views.py index 9562be4..aac0942 100644 --- a/docmanager_backend/questionnaires/views.py +++ b/docmanager_backend/questionnaires/views.py @@ -15,7 +15,14 @@ class QuestionnaireListAPIView(generics.ListAPIView): serializer_class = QuestionnaireSerializer queryset = Questionnaire.objects.all() pagination_class = PageNumberPagination - permission_classes = [IsAuthenticated, IsPlanning] + permission_classes = [IsAuthenticated] + + def get_queryset(self): + user = self.request.user + if user.role == "client": + return Questionnaire.objects.filter(client=user) + else: + return Questionnaire.objects.all() class QuestionnaireSubmitView(generics.CreateAPIView):