diff --git a/apps/wallet/views/user.py b/apps/wallet/views/user.py index 3af90ae..29eda33 100755 --- a/apps/wallet/views/user.py +++ b/apps/wallet/views/user.py @@ -231,13 +231,20 @@ class WalletAccountListAPIView(generics.ListAPIView): ''' API for getting authenticated user balance. ''' - permission_classes = [IsAuthenticatedOrTokenHasScope] + permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] serializer_class = AccountSerializer filter_backends = (DjangoFilterBackend,) filterset_class = AccountFilter - required_scopes = ['wallet.wallet:get_balance'] + required_alternate_scopes = { + "GET": [['wallet.user:transaction_list']], + # "POST": [['wallet.invoice:create']], + } queryset = Account.objects.all() + def get_queryset(self): + user = self.request.user + return Account.objects.filter(owner_uuid=user.uuid).all() + def get_object(self): user = self.request.user wallet_uuid = self.kwargs.get('wallet') @@ -298,3 +305,4 @@ class WalletTransactionListView(generics.ListAPIView): account, created = Account.objects.get_or_create(owner_uuid=user.uuid, owner_type=TypeChoices.USER, wallet=wallet) return Transaction.objects.filter(Q(payee_account=account) | Q(payer_account=account)).all() +