From 1693b36b2d75ee207f2ecb98675cd399c2797816 Mon Sep 17 00:00:00 2001 From: Roberto Rosario Date: Mon, 30 Apr 2018 05:12:37 -0400 Subject: [PATCH] Only try to return notifications for logged in users. Signed-off-by: Roberto Rosario --- mayan/apps/events/api_views.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/mayan/apps/events/api_views.py b/mayan/apps/events/api_views.py index 36c1e9b9b5..28801c1ae9 100644 --- a/mayan/apps/events/api_views.py +++ b/mayan/apps/events/api_views.py @@ -140,7 +140,10 @@ class APINotificationListView(generics.ListAPIView): def get_queryset(self): parameter_read = self.request.GET.get('read') - queryset = Notification.objects.filter(user=self.request.user) + if self.request.user.is_authenticated: + queryset = Notification.objects.filter(user=self.request.user) + else: + queryset = Notification.objects.none() if parameter_read == 'True': queryset = queryset.filter(read=True)