From 57b25f13f1798d354eeeb79d1a44d1edf7984798 Mon Sep 17 00:00:00 2001 From: Alejandro Alonso Date: Thu, 21 May 2015 12:27:32 +0200 Subject: [PATCH] Fixing users API --- taiga/base/filters.py | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/taiga/base/filters.py b/taiga/base/filters.py index 635a734f..d914c14d 100644 --- a/taiga/base/filters.py +++ b/taiga/base/filters.py @@ -287,9 +287,13 @@ class MembersFilterBackend(PermissionBasedFilterBackend): if not is_member and not has_project_public_view_permission: qs = qs.none() - qs = qs.filter(Q(memberships__project_id__in=projects_list) | - Q(memberships__project__public_permissions__contains=[self.permission])| - Q(id=request.user.id)) + q = Q(memberships__project_id__in=projects_list) | Q(id=request.user.id) + + #If there is no selected project we want access to users from public projects + if not project: + q = q | Q(memberships__project__public_permissions__contains=[self.permission]) + + qs = qs.filter(q) else: if project and not "view_project" in project.anon_permissions: