api: alter request user using hidden attribute (#36515)

This commit is contained in:
Frédéric Péters 2019-11-16 11:33:32 +01:00
parent fa1cab0d22
commit fc7b809712
1 changed files with 2 additions and 2 deletions

View File

@ -233,7 +233,7 @@ class ApiFormsDirectory(Directory):
raise TraversalError()
self.check_access()
get_request().user = get_user_from_api_query_string() or get_request().user
get_request()._user = get_user_from_api_query_string() or get_request().user
if FormDef.count() == 0:
# early return, this avoids running a query against a missing SQL view.
@ -295,7 +295,7 @@ class ApiFormsDirectory(Directory):
if not get_publisher().is_using_postgresql():
raise TraversalError()
self.check_access()
get_request().user = get_user_from_api_query_string() or get_request().user
get_request()._user = get_user_from_api_query_string() or get_request().user
return ManagementDirectory().geojson()
def _q_lookup(self, component):