Restrict semantic query API listing to user's own (#486 #163)

UUDigitalHumanitieslab · Jul 29, 2021 · 3756a53 · 3756a53
1 parent b1b0ce8
commit 3756a53
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/backend/items/views.py b/backend/items/views.py
@@ -315,6 +315,13 @@ class SemanticQueryViewSet(
 ):
     queryset = SemanticQuery.objects.all()
 
+    def get_queryset(self):
+        if self.action == 'list':
+            if self.request.user.is_anonymous:
+                return self.queryset.none()
+            return self.queryset.filter(creator=self.request.user)
+        return self.queryset
+
     def get_serializer_class(self):
         if self.action == 'retrieve':
             return SemanticQuerySerializerFull