statezero 0.1.0b2__py3-none-any.whl → 0.1.0b3__py3-none-any.whl

statezero/adaptors/django/orm.py

@@ -681,17 +681,17 @@ class DjangoORMAdapter(AbstractORMProvider):
         """
         offset = offset or 0
 
-        # First, get the paginated queryset
+        # FIXED: Perform bulk permission checks BEFORE slicing
+        if req is not None and permissions:
+            # Use the existing bulk permission check function on the unsliced queryset
+            check_bulk_permissions(req, self.queryset, ActionType.READ, permissions, self.model)
+
+        # THEN apply pagination/slicing
         if limit is None:
             qs = self.queryset[offset:]
         else:
             qs = self.queryset[offset : offset + limit]
 
-        # If permissions are provided, perform bulk permission checks
-        if req is not None and permissions:
-            # Use the existing bulk permission check function
-            check_bulk_permissions(req, qs, ActionType.READ, permissions, self.model)
-
         return qs
 
     def _build_conditions(self, conditions: dict) -> Q:

{statezero-0.1.0b2.dist-info → statezero-0.1.0b3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: statezero
-Version: 0.1.0b2
+Version: 0.1.0b3
 Summary: Connect your Python backend to a modern JavaScript SPA frontend with 90% less complexity.
 Author-email: Robert <robert.herring@statezero.dev>
 Project-URL: homepage, https://www.statezero.dev

{statezero-0.1.0b2.dist-info → statezero-0.1.0b3.dist-info}/RECORD

@@ -9,7 +9,7 @@ statezero/adaptors/django/exception_handler.py,sha256=cQF1Fm5IjH91ydB54TK9sqXiAO
 statezero/adaptors/django/f_handler.py,sha256=yvITFj9UAnz8-r-aLEcWoz48tBhZ08-VMq9Fsm2uiN8,12305
 statezero/adaptors/django/helpers.py,sha256=0Dyq5vboDuTUaH-KpS3oVDjastA9yv6xI6XpBuvRM3I,5974
 statezero/adaptors/django/middleware.py,sha256=YVr8fkqCk51xJQM-ovtrUiB9Kt9H81cLd9xv4cM9YlM,410
-statezero/adaptors/django/orm.py,sha256=0Tyyp81zX7Wc-2AXTQgIei7TqDoXWh23lopaaNxbJMs,36279
+statezero/adaptors/django/orm.py,sha256=G_dhMzX5iaaTSxO4bxSZvxMiBw7mLMWY2GUD0mlkMNg,36304
 statezero/adaptors/django/permissions.py,sha256=fU2c4bKK0zX2uuVB0UazZHTI-5OkiI5-BtPNcPEWmW0,9525
 statezero/adaptors/django/query_optimizer.py,sha256=-GNqL7Xn8WP8OsLEAAxXpIszSyEwm-l6WjgdkEFzxUM,38541
 statezero/adaptors/django/schemas.py,sha256=shq8ed9qHCnbCfYVsRxVE7V3R3GhGIKeRRj7dI3r1IU,12728
@@ -38,8 +38,8 @@ statezero/core/exceptions.py,sha256=_krMHWW9qBbMXvvqFdWf85a3Kayn7XbJczfC3x3gmBI,
 statezero/core/interfaces.py,sha256=HwcFXWJfIAxqYgWbGesn1Th9O8mvqH2r0XP2UyYifEw,15866
 statezero/core/process_request.py,sha256=NiG36XEjPMemJI03l5eTNaymyfUbwVgrx78chVcs4Nk,8047
 statezero/core/types.py,sha256=K9x9AU5J6yd2AWvqRz27CeAY6UYfuQoQ7xTEwTijrmM,1982
-statezero-0.1.0b2.dist-info/licenses/license.md,sha256=0uKjybTt9K_YbEmYgf25JN292qjjJ-BPofvIZ3wdtX4,7411
-statezero-0.1.0b2.dist-info/METADATA,sha256=XBm8wTTU3iTtKqJDZXWZ9rt2jPp9yW0NqIdkGZuZnPI,7152
-statezero-0.1.0b2.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-statezero-0.1.0b2.dist-info/top_level.txt,sha256=UAuZYPKczradU1kcMQxsGjUzEW0qdgsqzhXyscrcLpw,10
-statezero-0.1.0b2.dist-info/RECORD,,
+statezero-0.1.0b3.dist-info/licenses/license.md,sha256=0uKjybTt9K_YbEmYgf25JN292qjjJ-BPofvIZ3wdtX4,7411
+statezero-0.1.0b3.dist-info/METADATA,sha256=Zccgg4EbNtLlc0X_X0GHmvG7hLMQ4C_lXhPwApMK-aw,7152
+statezero-0.1.0b3.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+statezero-0.1.0b3.dist-info/top_level.txt,sha256=UAuZYPKczradU1kcMQxsGjUzEW0qdgsqzhXyscrcLpw,10
+statezero-0.1.0b3.dist-info/RECORD,,