diff --git a/apiserver/plane/api/permissions/project.py b/apiserver/plane/api/permissions/project.py index f87aaf08e..eea5192d5 100644 --- a/apiserver/plane/api/permissions/project.py +++ b/apiserver/plane/api/permissions/project.py @@ -49,7 +49,7 @@ class ProjectMemberPermission(BasePermission): ## Safe Methods -> Handle the filtering logic in queryset if request.method in SAFE_METHODS: return ProjectMember.objects.filter( - workspace=view.workspace, member=request.user + workspace__slug=view.workspace_slug, member=request.user ).exists() ## Only workspace owners or admins can create the projects if request.method == "POST": @@ -77,7 +77,7 @@ class ProjectEntityPermission(BasePermission): ## Safe Methods -> Handle the filtering logic in queryset if request.method in SAFE_METHODS: return ProjectMember.objects.filter( - workspace=view.workspace, + workspace__slug=view.workspace_slug, member=request.user, project_id=view.project_id, ).exists()