only show organization credit fields for single retrieves

Author: mitchelljkotler

documentcloud/organizations/serializers.py

@@ -82,10 +82,16 @@ def to_representation(self, instance):
         if "monthly_credits" in self.fields:
             # skip checks if we have already removed the fields
             request = self.context and self.context.get("request")
+            view = self.context and self.context.get("view")
+            action = view.action if view else None
             user = request and request.user
             is_org = isinstance(instance, Organization)
             if not (
-                is_org and user and user.is_authenticated and instance.has_member(user)
+                is_org
+                and user
+                and user.is_authenticated
+                and instance.has_member(user)
+                and action == "retrieve"
             ):
                 # only members may see AI credit information
                 self.fields.pop("monthly_credits")

documentcloud/users/tests/test_views.py

@@ -114,6 +114,7 @@ def test_retrieve_me_expanded(self, client, user):
         response_json = json.loads(response.content)
         context = {"request": MagicMock(), "view": MagicMock()}
         context["request"].user = user
+        context["view"].action = "retrieve"
         organization_serializer = OrganizationSerializer(
             user.organization, context=context
         )