05/25 Improvement 2

2026-05-25 12:33:06 -04:00
parent 9574d15f20
commit e703675370
3 changed files with 8 additions and 5 deletions
@@ -80,7 +80,8 @@ def index():
    )

    if current_user.role == 'inspector':
-        q = q.filter(Issue.assigned_to == current_user.id)
+        q = q.filter(db.or_(Issue.assigned_to == current_user.id,
+                             Issue.reported_by == current_user.id))
    elif current_user.role == 'customer':
        customer_facility_ids = get_customer_scope(current_user)
        if not customer_facility_ids:
@@ -171,8 +172,10 @@ def view(issue_id):
    if issue is None:
        abort(404)

-    if current_user.role == 'inspector' and issue.assigned_to != current_user.id:
-        flash('Access denied. You can only view issues assigned to you.', 'danger')
+    if current_user.role == 'inspector' and \
+            issue.assigned_to != current_user.id and \
+            issue.reported_by != current_user.id:
+        flash('Access denied.', 'danger')
        return redirect(url_for('issues.index'))
    if current_user.role == 'customer':
        cids = get_customer_scope(current_user) or []