Fix over-zealous validation

code4romania · Nov 6, 2024 · fbf68c2 · fbf68c2
1 parent 821a85b
commit fbf68c2
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/backend/hub/views.py b/backend/hub/views.py
@@ -816,18 +816,15 @@ def post(self, request, *args, **kwargs):
 
         user = self.request.user
         user_org: Organization = user.organization
-        candidate: Candidate = self.object
+        candidate: Candidate = self.get_object()
 
         if not user_org:
             raise PermissionDenied
 
-        if not user_org.is_complete_for_candidate:
-            raise PermissionDenied
-
         if not candidate:
             raise PermissionDenied
 
-        if not candidate.is_complete:
+        if not candidate == user_org.candidate:
             raise PermissionDenied
 
         return super().post(request, *args, **kwargs)