Don't allow overidding the use when creating a new document, use the request user

mayan/apps/documents/api_views.py

@@ -63,6 +63,11 @@ class APINewDocumentView(generics.GenericAPIView):
         if serializer.is_valid():
             shared_uploaded_file = SharedUploadedFile.objects.create(file=request.FILES['file'])
 
+            if request.user.is_anonymous():
+                user_id = None
+            else:
+                user_id = request.user.pk
+
             task_new_document.apply_async(kwargs=dict(
                 shared_uploaded_file_id=shared_uploaded_file.pk,
                 document_type_id=serializer.data['document_type'],
@@ -70,7 +75,7 @@ class APINewDocumentView(generics.GenericAPIView):
                 expand=serializer.data['expand'],
                 label=serializer.data['label'] or serializer.data['file'],
                 language=serializer.data['language'],
-                user_id=serializer.data['user']
+                user_id=user_id
             ), queue='uploads')
 
             headers = self.get_success_headers(serializer.data)

mayan/apps/documents/serializers.py

@@ -1,7 +1,5 @@
 from __future__ import absolute_import
 
-from django.contrib.auth.models import User
-
 from rest_framework import serializers
 
 from .literals import LANGUAGE_CHOICES
@@ -53,4 +51,3 @@ class NewDocumentSerializer(serializers.Serializer):
     file = serializers.FileField()
     label = serializers.CharField(required=False)
     language = serializers.ChoiceField(choices=LANGUAGE_CHOICES, blank_display_value=None, required=False)
-    user = serializers.ChoiceField(required=False, choices=[(user.pk, user) for user in User.objects.all()])