From d74940a4e0eb53cd4fdc9f4a3ad25f73590f8ee2 Mon Sep 17 00:00:00 2001
From: ismail <ismail.mosa.ibrahim@gmail.com>
Date: Thu, 7 Aug 2025 15:54:24 +0300
Subject: [PATCH 1/2] add ticket permission

---
 inventory/views.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/inventory/views.py b/inventory/views.py
index d10b3746..1efd4ccd 100644
--- a/inventory/views.py
+++ b/inventory/views.py
@@ -11146,6 +11146,7 @@ def help_center(request):
     return render(request, 'support/help_center.html')
 
 @login_required
+@permission_required('inventory.add_ticket')
 def create_ticket(request):
     if not request.is_dealer:
         return redirect('home')
@@ -11164,6 +11165,7 @@ def create_ticket(request):
     return render(request, 'support/create_ticket.html', {'form': form})
 
 @login_required
+@permission_required('inventory.view_ticket')
 def ticket_list(request):
     tickets = models.Ticket.objects.all().order_by('-created_at')
     if request.is_dealer:
@@ -11171,10 +11173,13 @@ def ticket_list(request):
     return render(request, 'support/ticket_list.html', {'tickets': tickets})
 
 @login_required
+@permission_required('inventory.change_ticket')
 def ticket_detail(request, ticket_id):
     ticket = models.Ticket.objects.get(id=ticket_id)
     return render(request, 'support/ticket_detail.html', {'ticket': ticket})
+
 @login_required
+@permission_required('inventory.change_ticket')
 def ticket_mark_resolved(request, ticket_id):
     ticket = models.Ticket.objects.get(id=ticket_id)
     ticket.status = 'resolved'
@@ -11190,6 +11195,8 @@ def ticket_mark_resolved(request, ticket_id):
     )
     return render(request, 'support/ticket_detail.html', {'ticket': ticket})
 
+@login_required
+@permission_required('inventory.change_ticket')
 def ticket_update(request, ticket_id):
     ticket = models.Ticket.objects.get(id=ticket_id)
 

From d5ba1d767e3586ec3ba111cd296f92656dd98611 Mon Sep 17 00:00:00 2001
From: ismail <ismail.mosa.ibrahim@gmail.com>
Date: Thu, 7 Aug 2025 15:57:31 +0300
Subject: [PATCH 2/2] small fix

---
 inventory/views.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/inventory/views.py b/inventory/views.py
index 1efd4ccd..e579f4fd 100644
--- a/inventory/views.py
+++ b/inventory/views.py
@@ -2466,7 +2466,7 @@ class CustomerCreateView(
     success_message = _("Customer created successfully")
 
     def form_valid(self, form):
-        dealer = self.request.kwargs.get("dealer_slug")
+        dealer = self.kwargs.get("dealer_slug")
         if customer := models.Customer.objects.filter(
             dealer=dealer,
             email=form.instance.email
@@ -2685,7 +2685,7 @@ class VendorCreateView(
     permission_required = ["inventory.add_vendor"]
 
     def form_valid(self, form):
-        dealer = self.request.kwargs["dealer_slug"]
+        dealer = self.kwargs["dealer_slug"]
         if vendor := models.Vendor.objects.filter(dealer=dealer,email=form.instance.email).first():
             if not vendor.active:
                 messages.error(
@@ -3666,7 +3666,7 @@ class OrganizationCreateView(LoginRequiredMixin, PermissionRequiredMixin, Create
     success_message = _("Organization created successfully")
 
     def form_valid(self, form):
-        dealer = self.request.kwargs["dealer_slug"]
+        dealer = self.kwargs["dealer_slug"]
         if organization := models.Organization.objects.filter(
             dealer=dealer,
             email=form.instance.email