From 108c24eefb04525c51a54957b2cf4b0b7b6f198f Mon Sep 17 00:00:00 2001 From: BOUKERFA Mohamed El Amine Date: Fri, 3 Jul 2026 09:17:52 +0200 Subject: [PATCH] =?UTF-8?q?=E2=99=BB=EF=B8=8F(backend)=20annotate=20mentio?= =?UTF-8?q?ned=20user=20roles=20in=20mention=20validation?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: BOUKERFA Mohamed El Amine --- src/backend/core/api/serializers.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/backend/core/api/serializers.py b/src/backend/core/api/serializers.py index 3e5e38194..8362ec152 100644 --- a/src/backend/core/api/serializers.py +++ b/src/backend/core/api/serializers.py @@ -1027,7 +1027,9 @@ class MentionSerializer(serializers.ModelSerializer): def validate_mentioned_user_id(self, user): """Ensure the mentioned user has access to the document.""" - document = models.Document.objects.get(pk=self.context["document"].pk) + document = models.Document.objects.annotate_user_roles(user).get( + pk=self.context["document"].pk + ) if document.get_role(user) is None: raise serializers.ValidationError( "This user does not have access to the document."