Respect superuser for advanced queries, test coverage for object perms

2025-08-12 00:19:48 +00:00 · 2023-04-27 15:00:03 -07:00
parent d2a8076596
commit e275a2736a
3 changed files with 100 additions and 8 deletions
--- a/src/documents/views.py
+++ b/src/documents/views.py
@@ -604,6 +604,9 @@ class UnifiedSearchViewSet(DocumentViewSet):
                # pass user to query for perms
                self.request.query_params._mutable = True
                self.request.query_params["user"] = self.request.user.id
+                self.request.query_params[
+                    "is_superuser"
+                ] = self.request.user.is_superuser
                self.request.query_params._mutable = False

            if "query" in self.request.query_params: