hotfix-anynomus-user-check (#13)

Co-authored-by: Jan <[email protected]>
openimis · Apr 23, 2024 · dc6587f · dc6587f
1 parent 1ac5ea5
commit dc6587f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/grievance_social_protection/schema.py b/grievance_social_protection/schema.py
@@ -1,3 +1,5 @@
+from django.contrib.auth.models import AnonymousUser
+
 from core import filter_validity
 from core.schema import OrderedDjangoFilterConnectionField, OpenIMISMutation
 from core.schema import signal_mutation_module_validate
@@ -107,6 +109,8 @@ def resolve_ticketsStr(self, info, **kwargs):
 
     def resolve_grievance_config(self, info, **kwargs):
         user = info.context.user
+        if type(user) is AnonymousUser:
+            raise PermissionDenied(_("unauthorized"))
         if not user.is_imis_admin:
             raise PermissionDenied(_("unauthorized"))
         return GrievanceTypeConfigurationGQLType()