Raise 404 on celery progress view if the user is anonymous

CHANGELOG.rst

@@ -14,6 +14,10 @@ Added
 
 * Allow apps to dynamically generate OAuth scopes
 
+Fixed
+~~~~~
+* The view for getting the progress of celery tasks didn't respect that there can be anonymous users.
+
 Removed
 ~~~~~~~
 

aleksis/core/views.py

@@ -1151,6 +1151,8 @@ class CeleryProgressView(View):
     """Wrap celery-progress view to check permissions before."""
 
     def get(self, request: HttpRequest, task_id: str, *args, **kwargs) -> HttpResponse:
+        if request.user.is_anonymous:
+            raise Http404()
         if not TaskUserAssignment.objects.filter(
             task_result__task_id=task_id, user=request.user
         ).exists():