mirror of
https://github.com/encode/django-rest-framework.git
synced 2025-07-17 19:52:25 +03:00
fix anonymous access for DjangoModelPermissionsOrAnonReadOnly
This commit is contained in:
parent
77ef27f18f
commit
b4cb27fd94
|
@ -255,6 +255,12 @@ class DjangoModelPermissionsOrAnonReadOnly(DjangoModelPermissions):
|
||||||
"""
|
"""
|
||||||
authenticated_users_only = False
|
authenticated_users_only = False
|
||||||
|
|
||||||
|
def has_permission(self, request, view):
|
||||||
|
if request.user and request.user.is_authenticated:
|
||||||
|
return bool(super().has_permission(request, view))
|
||||||
|
|
||||||
|
return bool(request.method in SAFE_METHODS)
|
||||||
|
|
||||||
|
|
||||||
class DjangoObjectPermissions(DjangoModelPermissions):
|
class DjangoObjectPermissions(DjangoModelPermissions):
|
||||||
"""
|
"""
|
||||||
|
|
Loading…
Reference in New Issue
Block a user