Mixin: check that siae_id is numeric

gip-inclusion · Sep 14, 2023 · 777fb98 · 777fb98
1 parent 052e88b
commit 777fb98
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lemarche/utils/mixins.py b/lemarche/utils/mixins.py
@@ -174,7 +174,7 @@ def handle_no_permission(self):
 class LoginRequiredOrSiaeIdParamMixin(UserPassesTestMixin):
     def test_func(self):
         siae_id = self.request.GET.get("siae_id", None)
-        return self.request.user.is_authenticated or siae_id
+        return self.request.user.is_authenticated or (siae_id and siae_id.isnumeric())
 
     def handle_no_permission(self):
         return LoginRequiredUserPassesTestMixin.dispatch(self, self.request)