Disable superusers and staff from seeing private and sensitive data (#…

…4217)
kartoza · Sep 3, 2024 · 80c6dc0 · 80c6dc0
1 parent ef4f98a
commit 80c6dc0
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/bims/api_views/search.py b/bims/api_views/search.py
@@ -641,10 +641,7 @@ def process_search(self):
  is_private_data_access_allowed = False
  try:
  requester = get_user_model().objects.get(id=requester_id)
- is_requester_staff = requester.is_staff or requester.is_superuser
  user_groups = requester.groups.values_list('name', flat=True)
- if is_requester_staff:
- is_private_data_access_allowed = True
  if 'SensitiveDataGroup' in user_groups:
  is_sensitive_data_access_allowed = True
  if 'PrivateDataGroup' in user_groups: