From 86bc491df4f0f54f92911f809b056640dfae5b57 Mon Sep 17 00:00:00 2001
From: tleb <tleb@openmailbox.org>
Date: Sun, 20 Oct 2019 18:26:11 +0200
Subject: [PATCH] Fix UV_endpoint auth

---
 api/views/uv.py    | 5 +----
 core/middleware.py | 2 +-
 core/models.py     | 2 +-
 sith/settings.py   | 3 +++
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/api/views/uv.py b/api/views/uv.py
index 940aa3a7..2b7b33e9 100644
--- a/api/views/uv.py
+++ b/api/views/uv.py
@@ -12,10 +12,7 @@ from pedagogy.views import CanCreateUVFunctionMixin
 @api_view(["GET"])
 @renderer_classes((JSONRenderer,))
 def uv_endpoint(request):
-    # is authenticated and has the right to create an UV
-    if not request.user.is_authenticated or not CanCreateUVFunctionMixin.can_create_uv(
-        request.user
-    ):
+    if not CanCreateUVFunctionMixin.can_create_uv(request.user):
         raise PermissionDenied
 
     params = request.query_params
diff --git a/core/middleware.py b/core/middleware.py
index 54d7dd2e..2567dc91 100644
--- a/core/middleware.py
+++ b/core/middleware.py
@@ -38,7 +38,7 @@ def get_cached_user(request):
     if not hasattr(request, "_cached_user"):
         user = get_user(request)
         if user.is_anonymous:
-            user = AnonymousUser(request)
+            user = AnonymousUser()
 
         request._cached_user = user
 
diff --git a/core/models.py b/core/models.py
index 17bc5003..1afc9858 100644
--- a/core/models.py
+++ b/core/models.py
@@ -659,7 +659,7 @@ class User(AbstractBaseUser):
 
 
 class AnonymousUser(AuthAnonymousUser):
-    def __init__(self, request):
+    def __init__(self):
         super(AnonymousUser, self).__init__()
 
     @property
diff --git a/sith/settings.py b/sith/settings.py
index 75c864d3..3fe4e826 100644
--- a/sith/settings.py
+++ b/sith/settings.py
@@ -196,6 +196,8 @@ SASS_PRECISION = 8
 
 WSGI_APPLICATION = "sith.wsgi.application"
 
+REST_FRAMEWORK = {}
+
 
 # Database
 # https://docs.djangoproject.com/en/1.8/ref/settings/#databases
@@ -252,6 +254,7 @@ LOGOUT_URL = "/logout"
 LOGIN_REDIRECT_URL = "/"
 DEFAULT_FROM_EMAIL = "bibou@git.an"
 SITH_COM_EMAIL = "bibou_com@git.an"
+REST_FRAMEWORK["UNAUTHENTICATED_USER"] = "core.models.AnonymousUser"
 
 # Email
 EMAIL_BACKEND = "django.core.mail.backends.console.EmailBackend"