[FIX] HELPDESK: Missing permission in helpdesk delete conditions

This commit is contained in:
Horilla
2024-05-14 16:31:12 +05:30
parent babc994098
commit b972d7139c

View File

@@ -1009,7 +1009,7 @@ def comment_edit(request):
@login_required
def comment_delete(request, comment_id):
comment = Comment.objects.filter(id=comment_id)
if request.user.has_perm("helpdesk.delete_comment"):
if not request.user.has_perm("helpdesk.delete_comment"):
comment = comment.filter(employee_id__employee_user_id=request.user)
comment.delete()
messages.success(
@@ -1214,6 +1214,7 @@ def update_department_manager(request, dep_id):
@login_required
@permission_required("helpdesk.delete_departmentmanager")
def delete_department_manager(request, dep_id):
department_manager = DepartmentManager.objects.get(id=dep_id)
department_manager.delete()