Make account required for trade information
This commit is contained in:
@@ -29,7 +29,8 @@ class TradeAction(LoginRequiredMixin, OTPRequiredMixin, ObjectRead):
|
||||
|
||||
def get_object(self, **kwargs):
|
||||
trade_id = kwargs.get("trade_id")
|
||||
db_info = Trade.get_by_id_or_order(trade_id, self.request.user)
|
||||
account_id = kwargs.get("account_id")
|
||||
db_info = Trade.get_by_id_or_order(trade_id, account_id, self.request.user)
|
||||
if db_info is None:
|
||||
return HttpResponseBadRequest("Trade not found.")
|
||||
if db_info.order_id is not None:
|
||||
|
||||
Reference in New Issue
Block a user