sander/rowsandall
Private
Public Access
1
0
Fork 0
Code Activity

permissions

Browse Source
This commit is contained in:
Sander Roosendaal
2016-12-14 22:55:23 +01:00
parent b4d7db324e
commit 170d0e43a1
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rowers/permissions.py
View File

@@ -13,7 +13,7 @@ class IsOwnerOrReadOnly(permissions.BasePermission):
return True return True
# Write permissions are only allowed to the owner of the snippet. # Write permissions are only allowed to the owner of the snippet.
return obj.owner == request.user return obj.user == request.user
class IsOwnerOrNot(permissions.BasePermission): class IsOwnerOrNot(permissions.BasePermission):
def has_object_permission(self, request, view, obj): def has_object_permission(self, request, view, obj):

2
rowers/urls.py
View File

@@ -18,7 +18,7 @@ from rowers.permissions import IsOwnerOrNot,IsOwnerOrReadOnly
from rowers.serializers import WorkoutSerializer,RowerSerializer from rowers.serializers import WorkoutSerializer,RowerSerializer
class WorkoutViewSet(viewsets.ModelViewSet): class WorkoutViewSet(viewsets.ModelViewSet):
queryset = Workout.objects.none().order_by("-date", "-starttime") queryset = Workout.objects.all().order_by("-date", "-starttime")
serializer_class = WorkoutSerializer serializer_class = WorkoutSerializer
permission_classes = (IsOwnerOrNot,) permission_classes = (IsOwnerOrNot,)