Fixhancement: check more permissions for status consumer messages (#9804)

2025-07-30 18:27:45 -05:00 · 2025-04-26 23:31:04 -07:00
parent 0cefdc8475
commit a3b85c64ca
6 changed files with 125 additions and 12 deletions
--- a/src/documents/consumer.py
+++ b/src/documents/consumer.py
@@ -137,6 +137,10 @@ class ConsumerPlugin(
            extra_args={
                "document_id": document_id,
                "owner_id": self.metadata.owner_id if self.metadata.owner_id else None,
+                "users_can_view": (self.metadata.view_users or [])
+                + (self.metadata.change_users or []),
+                "groups_can_view": (self.metadata.view_groups or [])
+                + (self.metadata.change_groups or []),
            },
        )