diff --git a/offer_backend/apps/applications/views.py b/offer_backend/apps/applications/views.py index 2fe189f..ae1a98f 100644 --- a/offer_backend/apps/applications/views.py +++ b/offer_backend/apps/applications/views.py @@ -31,7 +31,12 @@ class ApplicationManageViewSet(viewsets.ReadOnlyModelViewSet): class ApplicationStatusUpdateView(generics.UpdateAPIView): serializer_class = ApplicationStatusSerializer permission_classes = [IsAdminOrSuperAdmin] - queryset = Application.objects.all() + + def get_queryset(self): + user = self.request.user + if user.is_superadmin: + return Application.objects.all() + return Application.objects.filter(job__organization=user.organization) def perform_update(self, serializer): instance = serializer.save()