Skip to content

DEV Hotfix: fix news attachment link validation - #699

Merged
TThanos3000 merged 1 commit into
devfrom
hotfix/dev-news-attachments
Aug 21, 2026
Merged

DEV Hotfix: fix news attachment link validation#699
TThanos3000 merged 1 commit into
devfrom
hotfix/dev-news-attachments

Conversation

@TThanos3000

Copy link
Copy Markdown
Collaborator

Что перенесено

DEV-версия backend hotfix из master PR #698.

  • Исправлена валидация вложений новостей: для PrimaryKeyRelatedField(..., many=True) ownership queryset назначается на child_relation.queryset.
  • Сохранена проверка владельца файла: принимаются только UserFile текущего authenticated user.
  • Перенесены regression tests для UserFile.link в News API.

Проверки

  • python -m black --check news/serializers.py news/tests/test_news_attachment_contract.py — passed.
  • DEBUG=True python manage.py test news.tests.test_news_attachment_contract news.tests.test_news_project_api.ProjectScopedNewsAPITests.test_project_news_create_rejects_file_of_another_user --verbosity 1 — passed, 6 tests.

Scope

  • Base: dev.
  • Master не менялся.
  • React backend/deploy не трогались.
  • Merge автоматически не выполнять.

@TThanos3000
TThanos3000 marked this pull request as ready for review August 21, 2026 05:38
@TThanos3000
TThanos3000 merged commit f6803b1 into dev Aug 21, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant