mirror of
https://github.com/encode/django-rest-framework.git
synced 2025-07-16 19:22:24 +03:00
fix anonymous access for DjangoModelPermissionsOrAnonReadOnly
This commit is contained in:
parent
77ef27f18f
commit
b4cb27fd94
|
@ -255,6 +255,12 @@ class DjangoModelPermissionsOrAnonReadOnly(DjangoModelPermissions):
|
|||
"""
|
||||
authenticated_users_only = False
|
||||
|
||||
def has_permission(self, request, view):
|
||||
if request.user and request.user.is_authenticated:
|
||||
return bool(super().has_permission(request, view))
|
||||
|
||||
return bool(request.method in SAFE_METHODS)
|
||||
|
||||
|
||||
class DjangoObjectPermissions(DjangoModelPermissions):
|
||||
"""
|
||||
|
|
Loading…
Reference in New Issue
Block a user