From b4cb27fd94d9fb7a0c761f0417cb28d857344316 Mon Sep 17 00:00:00 2001 From: Justin Farnsworth Date: Tue, 19 Mar 2024 23:35:20 -0400 Subject: [PATCH] fix anonymous access for DjangoModelPermissionsOrAnonReadOnly --- rest_framework/permissions.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/rest_framework/permissions.py b/rest_framework/permissions.py index 8fb4569cb..2c52865c9 100644 --- a/rest_framework/permissions.py +++ b/rest_framework/permissions.py @@ -255,6 +255,12 @@ class DjangoModelPermissionsOrAnonReadOnly(DjangoModelPermissions): """ authenticated_users_only = False + def has_permission(self, request, view): + if request.user and request.user.is_authenticated: + return bool(super().has_permission(request, view)) + + return bool(request.method in SAFE_METHODS) + class DjangoObjectPermissions(DjangoModelPermissions): """