See #152: use new user permissions on relevant viewsets

This commit is contained in:
Eliot Berriot 2018-05-18 18:48:46 +02:00
parent ff65a4b935
commit 6fc4275b68
No known key found for this signature in database
GPG key ID: DD6965E2476E5C27
10 changed files with 71 additions and 58 deletions

View file

@ -3,7 +3,7 @@ import operator
from django.conf import settings
from django.http import Http404
from rest_framework.permissions import BasePermission, DjangoModelPermissions
from rest_framework.permissions import BasePermission
from funkwhale_api.common import preferences
@ -16,17 +16,6 @@ class ConditionalAuthentication(BasePermission):
return True
class HasModelPermission(DjangoModelPermissions):
"""
Same as DjangoModelPermissions, but we pin the model:
class MyModelPermission(HasModelPermission):
model = User
"""
def get_required_permissions(self, method, model_cls):
return super().get_required_permissions(method, self.model)
class OwnerPermission(BasePermission):
"""
Ensure the request user is the owner of the object.