From 216365fdb6fb42f98cbc392e358a91e95db872db Mon Sep 17 00:00:00 2001 From: Markos Gogoulos Date: Fri, 6 Mar 2026 16:29:51 +0200 Subject: [PATCH] a --- files/views/media.py | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/files/views/media.py b/files/views/media.py index f385cc51..2ef823d4 100644 --- a/files/views/media.py +++ b/files/views/media.py @@ -164,7 +164,14 @@ class MediaList(APIView): if not self.request.user.is_authenticated: media = Media.objects.none() else: - media = Media.objects.filter(permissions__owner_user=self.request.user).prefetch_related("user", "tags").distinct() + base_queryset = Media.objects.prefetch_related("user", "tags") + conditions = Q(permissions__owner_user=self.request.user) + + if getattr(settings, 'USE_RBAC', False): + rbac_categories = request.user.get_rbac_categories_as_contributor() + conditions |= Q(category__in=rbac_categories) + + media = base_queryset.filter(conditions).distinct() elif show_param == "shared_with_me": if not self.request.user.is_authenticated: media = Media.objects.none()