From d7887019f7d67e2fc5e9a7f4a7e449cc4c877e17 Mon Sep 17 00:00:00 2001 From: Eberton Kociba Date: Tue, 26 May 2026 22:39:46 -0300 Subject: [PATCH] Bugfix: Acesso sem selecionar fazenda MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit As ListViews não verificavam a existência de uma fazenda selecionada antes de exibir seu conteúdo, permitindo um acesso não intencionado --- multigranja/apps/entities/views/list/base.py | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/multigranja/apps/entities/views/list/base.py b/multigranja/apps/entities/views/list/base.py index 8f8ce2d..0cba017 100644 --- a/multigranja/apps/entities/views/list/base.py +++ b/multigranja/apps/entities/views/list/base.py @@ -1,6 +1,7 @@ from django.views.generic import ListView from django.db.models import Q from entities.models.farm import Farm +from django.shortcuts import redirect class BaseListView(ListView): template_name = "entity_list.html" @@ -21,8 +22,12 @@ class BaseListView(ListView): # Acts like a init function - provides the select_farm Farm object to all dependent views def dispatch(self, request, *args, **kwargs): - farm_id = self.request.session.get('selected_farm_id') - self.selected_farm = Farm.objects.filter(id=farm_id).first() + try: # Prevents Django from loading the page without a selected farm + farm_id = request.session['selected_farm_id'] + except KeyError: + return redirect('entities:user:farm_select') + + self.selected_farm = Farm.objects.filter(id=farm_id, users=request.user).first() return super().dispatch(request, *args, **kwargs) # Filter