The form of the LeadCreateView provides access to all the agents

[paulrogov]

The form of the LeadCreateView is bugged.

It provides access to all the agents, including those from other organizations (created by other organizer users).

fullscreen

[paulrogov]

The fix is the same as for the AssignAgentForm. You need to update a queryset of a form field "agent" inside a form's __init__

---

Add a new form to forms.py

class LeadCreationModelForm(forms.ModelForm):
    class Meta:
        model = Lead
        fields = (
            "first_name",
            "last_name",
            "age",
            "agent",
            "description",
            "phone_number",
            "email",
            "profile_picture",
        )

    def __init__(self, *args, **kwargs):
        request = kwargs.pop("request")
        agents = Agent.objects.filter(organization=request.user.userprofile)
        super().__init__(*args, **kwargs)
        self.fields["agent"].queryset = agents

views.py

from .forms import LeadCreationModelForm

class LeadCreateView(OrganizerLoginRequiredMixin, CreateView):
    template_name = "leads/lead_create.html"
    form_class = LeadCreationModelForm

    def get_form_kwargs(self, **kwargs):
        kwargs = super().get_form_kwargs(**kwargs)
        kwargs.update({
            "request": self.request
        })
        return kwargs

    def get_success_url(self) -> str:
        return reverse("leads:lead-list")

    def form_valid(self, form):
        lead = form.save(commit=False)
        lead.organization = self.request.user.userprofile
        lead.save()
        # TODO send email
        send_mail(
            subject="A lead has been created",
            message="Go to the site to see the new lead",
            from_email="test@test.com",
            recipient_list=["test2@test.com"]
        )
        messages.success(self.request, "You have successfully created a lead")
        return super(LeadCreateView, self).form_valid(form)