Not cast uuid to str to check nodegroup permission, #11126

archesproject · Jul 22, 2024 · 637cc9b · 637cc9b
1 parent abd8654
commit 637cc9b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/arches/app/views/api.py b/arches/app/views/api.py
@@ -1706,7 +1706,7 @@ def get(self, request, tileid):
         permitted_nodegroups = get_nodegroups_by_perm(
             request.user, "models.read_nodegroup"
         )
-        if str(tile.nodegroup_id) in permitted_nodegroups:
+        if tile.nodegroup_id in permitted_nodegroups:
             return JSONResponse(tile, status=200)
         else:
             return JSONResponse(_("Tile not found."), status=404)
@@ -1801,7 +1801,7 @@ def graphLookup(graphid):
 
         # filter nodes from attribute query based on user permissions
         permitted_nodes = [
-            node for node in nodes if str(node["nodegroup_id"]) in permitted_nodegroups
+            node for node in nodes if node["nodegroup_id"] in permitted_nodegroups
         ]
         for node in permitted_nodes:
             try: