ixg_platform/apps/batches
ixgadmin 88eede5d7a Restrict the processing-batch API to ops/admin
Any authenticated user could PATCH a batch, and the write serializer accepted
status, so a buyer could move a qc_fail batch to delivered. The buyer portal
reads batches through the ORM, not this API, so the whole viewset is closed to
ops/admin and the write serializer refuses a hand-set QC status and any
transition out of qc_fail.
2026-09-17 14:48:09 +00:00
..
migrations Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
__init__.py Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
admin.py Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
apps.py Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
models.py Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
serializers.py Restrict the processing-batch API to ops/admin 2026-09-17 14:48:09 +00:00
tests.py Restrict the processing-batch API to ops/admin 2026-09-17 14:48:09 +00:00
urls.py Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
views.py Restrict the processing-batch API to ops/admin 2026-09-17 14:48:09 +00:00