Get character by ID doesn't check who owns the character #113

get_queryset filters characters by owner, but get() ignores it and queries the whole table. Any account can read any character by walking through the IDs, and every row also reports the owner account attached to it.

Swap line 29 for self.get_object() so the filter runs.

persistence/api/views.py 29