encode/django-rest-framework
1
1
Fork 0
mirror of https://github.com/encode/django-rest-framework.git synced 2025-04-25 11:33:43 +03:00
Code Issues Packages Projects Releases Wiki Activity

Enforce object permissions check when rendering forms in browseable API

Browse Source
This commit is contained in:
Tom Christie 2013-05-18 21:19:53 +01:00
parent 5ed3f59a2c
commit 4802177766
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
rest_framework/renderers.py
View File

@ -349,6 +349,7 @@ class BrowsableAPIRenderer(BaseRenderer):
try: try:
view.check_permissions(request) view.check_permissions(request)
view.check_object_permissions(request, obj)
except exceptions.APIException: except exceptions.APIException:
return False # Doesn't have permissions return False # Doesn't have permissions
return True return True