mirror of
https://github.com/ae-utbm/sith.git
synced 2025-07-09 19:40:19 +00:00
Fixed api permissions
This commit is contained in:
@ -24,7 +24,7 @@ class RightManagedModelViewSet(viewsets.ModelViewSet):
|
||||
try:
|
||||
if (request.method == 'GET' and can_view(obj, user)):
|
||||
return res
|
||||
elif (request.method == 'PUSH' and can_edit(obj, user)):
|
||||
elif (request.method != 'GET' and can_edit(obj, user)):
|
||||
return res
|
||||
except: pass # To prevent bug with Anonymous user
|
||||
raise PermissionDenied
|
||||
|
Reference in New Issue
Block a user