fix: prevent 500 error when access token user does not have Member

djoamersfoort · Sep 3, 2023 · 8236353 · 8236353
1 parent a1282b3
commit 8236353
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/LedenAdministratie/api.py b/LedenAdministratie/api.py
@@ -70,7 +70,8 @@ def get(self, request, *args, **kwargs):
         if token is None:
             return HttpResponseForbidden()
 
-        if not request.resource_owner or not request.resource_owner.member:
+        if not request.resource_owner or not hasattr(request.resource_owner, "member"):
+            # Access token User does not have a linked Member record -> deny access
             return HttpResponseForbidden()
 
         member = request.resource_owner.member