Adjusted check to include finding evidence

chrismaddalena · chrismaddalena · commit 76221fc37d17 · 2026-03-27T13:05:10.000-07:00
This is temporary until PR #790 is merged.
diff --git a/ghostwriter/api/views.py b/ghostwriter/api/views.py
@@ -948,7 +948,8 @@ def post(self, request, *args, **kwargs):
             )
 
         # Verify evidence belongs to the same project via its report
-        if evidence.report and evidence.report.project != entry.oplog_id.project:
+        # TODO: Update this check when we remove finding evidence links with PR #790
+        if evidence.report or evidence.finding and evidence.associated_report.project.project != entry.oplog_id.project:
             return JsonResponse(
                 utils.generate_hasura_error_payload(
                     "Evidence does not belong to the same project", "ProjectMismatch"

Original file line number	Diff line number	Diff line change
`@@ -948,7 +948,8 @@ def post(self, request, args, *kwargs):`
`948`	`948`	`)`
`949`	`949`
`950`	`950`	`# Verify evidence belongs to the same project via its report`
`951`		`- if evidence.report and evidence.report.project != entry.oplog_id.project:`
	`951`	`+ # TODO: Update this check when we remove finding evidence links with PR #790`
	`952`	`+ if evidence.report or evidence.finding and evidence.associated_report.project.project != entry.oplog_id.project:`
`952`	`953`	`return JsonResponse(`
`953`	`954`	`utils.generate_hasura_error_payload(`
`954`	`955`	`"Evidence does not belong to the same project", "ProjectMismatch"`