mirrors/bookwyrm
1
0
Fork 1
mirror of https://github.com/bookwyrm-social/bookwyrm.git synced 2024-05-20 09:18:19 +00:00
Code Issues Projects Releases Wiki Activity

use privacy__in to respect shelf privacy settings

Browse source
This commit is contained in:
mattkatz 2024-03-12 22:10:18 -04:00
parent e3ca543f8e
commit 5b8e083bcd
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
bookwyrm/views/rss_feed.py
View file

@ -200,10 +200,12 @@ class RssShelfFeed(Feed):
"""the shelf that gets serialized"""
user = get_user_from_username(request.user, username)
# always get privacy, don't support rss over anything private
# Shelf.privacy_filter(request.user).filter(user=user).all()
# TODO: get the SHELF of the object
shelf = get_object_or_404(user.shelf_set, identifier=shelf_identifier)
# get the SHELF of the object
shelf = get_object_or_404(
user.shelf_set,
identifier=shelf_identifier,
privacy__in=["public", "unlisted"],
)
shelf.raise_visible_to_user(request.user)
return shelf