🔥 Removes ability to see your own Application

djangocon · May 27, 2024 · 2f06b19 · 2f06b19
1 parent 50e71f0
commit 2f06b19
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/grants/views/program.py b/grants/views/program.py
@@ -181,7 +181,10 @@ def get_queryset(self):
         # Fetch applicants
         # but don't let a user see their own request
         applicants = list(
-            self.program.applicants.exclude(email=self.request.user.email)
+            self.program.applicants.exclude(
+                Q(email=self.request.user.email) |
+                Q(name=self.request.user.get_full_name())
+            )
             .prefetch_related("scores")
             .order_by("-applied")
         )