From 36639f47652b85e44214177ad2003793bb6f2498 Mon Sep 17 00:00:00 2001 From: ludbek Date: Mon, 1 Aug 2016 15:45:27 +0545 Subject: [PATCH] check allowed methods before checking permissions and stuff --- rest_framework/views.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rest_framework/views.py b/rest_framework/views.py index 41d108e53..36d631111 100644 --- a/rest_framework/views.py +++ b/rest_framework/views.py @@ -451,10 +451,10 @@ class APIView(View): self.headers = self.default_response_headers # deprecate? try: - self.initial(request, *args, **kwargs) - # Get the appropriate handler method if request.method.lower() in self.http_method_names: + self.initial(request, *args, **kwargs) + handler = getattr(self, request.method.lower(), self.http_method_not_allowed) else: