Commit 706b309a authored by nanoy's avatar nanoy

Merge branch 'fix_api_perm_check' into 'master'

Fix api permission check

See merge request !484
parents 8e37baef ce4b3290
Pipeline #2375 passed with stage
in 3 minutes and 26 seconds
......@@ -23,7 +23,7 @@
"""
from rest_framework import permissions, exceptions
from django.http import Http404
from . import acl
......@@ -273,6 +273,8 @@ class AutodetectACLPermission(permissions.BasePermission):
# they have read permissions to see 403, or not, and simply see
# a 404 response.
SAFE_METHODS = ("GET", "OPTIONS", "HEAD", "POST", "PUT", "PATCH", "DELETE")
if request.method in SAFE_METHODS:
# Read permissions already checked and failed, no need
# to make another lookup.
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment