OpenConceptLab/ocl_issues#992 | concept collection membership restricted to user/org scope

Author: snyaggarwal

core/concepts/views.py

@@ -183,7 +183,8 @@ def get_queryset(self):
         if not self.kwargs.get('concept_version'):
             instance = instance.get_latest_version()
 
-        return instance.collection_set
+        return instance.collection_set.filter(
+            organization_id=instance.parent.organization_id, user_id=instance.parent.user_id)
 
     def get(self, request, *args, **kwargs):
         return self.list(request, *args, **kwargs)