fix anonymous access for DjangoModelPermissionsOrAnonReadOnly

This commit is contained in:
Justin Farnsworth 2024-03-19 23:35:20 -04:00
parent 77ef27f18f
commit b4cb27fd94

View File

@ -255,6 +255,12 @@ class DjangoModelPermissionsOrAnonReadOnly(DjangoModelPermissions):
"""
authenticated_users_only = False
def has_permission(self, request, view):
if request.user and request.user.is_authenticated:
return bool(super().has_permission(request, view))
return bool(request.method in SAFE_METHODS)
class DjangoObjectPermissions(DjangoModelPermissions):
"""