Resolve "Rethink permission handling for subject/courses"

Closes #18 (closed)

aleksis/apps/cursus/schema.py

@@ -56,7 +56,12 @@ class SubjectType(PermissionsTypeMixin, DjangoFilterMixin, DjangoObjectType):
 
     @classmethod
     def get_queryset(cls, queryset, info):
-        return get_objects_for_user(info.context.user, "cursus.view_subject", Subject)
+        # FIXME: Permissions... this is just a workaround,
+        # because cursus.view_subject would have to be assigned manually
+        if not has_person(info.context.user):
+            raise PermissionDenied()
+        return queryset
+        # return get_objects_for_user(info.context.user, "cursus.view_subject", Subject)
 
     @staticmethod
     def resolve_courses(root, info, **kwargs):