From cc771d20f1c80ca9752cf3db55c862975e96ee51 Mon Sep 17 00:00:00 2001
From: Thomas Steen Rasmussen <tykling@bornhack.org>
Date: Fri, 14 Apr 2017 15:36:41 +0200
Subject: [PATCH] only show creditnotes belonging to the logged in user

---
 src/shop/views.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/shop/views.py b/src/shop/views.py
index 7d1a5ad8..f7d51de2 100644
--- a/src/shop/views.py
+++ b/src/shop/views.py
@@ -359,6 +359,10 @@ class CreditNoteListView(LoginRequiredMixin, ListView):
     template_name = "creditnote_list.html"
     context_object_name = 'creditnotes'
 
+    def get_queryset(self):
+        queryset = super().get_queryset()
+        return queryset.filter(user=self.request.user)
+
 
 class DownloadCreditNoteView(LoginRequiredMixin, EnsureUserOwnsCreditNoteMixin, EnsureCreditNoteHasPDFMixin, SingleObjectMixin, View):
     model = CreditNote