Dockery/Pinry
1
0
Fork 0
mirror of https://github.com/pinry/pinry.git synced 2025-11-14 17:05:50 +01:00
Code Issues Packages Projects Releases Activity

Fix bug in API now allowing delete or edit of pins

Browse Source
This commit is contained in:
Isaac Bythewood
2016-02-04 01:34:19 +00:00
parent 51c6e58fc5
commit 5802167b72
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
pinry/core/api.py
View File

@@ -20,7 +20,7 @@ class PinryAuthorization(DjangoAuthorization):
if klass is False: if klass is False:
raise Unauthorized("You are not allowed to access that resource.") raise Unauthorized("You are not allowed to access that resource.")
permission = '%s.change_%s' % (klass._meta.app_label, klass._meta.module_name) permission = '%s.change_%s' % (klass._meta.app_label, klass._meta.model_name)
if not bundle.request.user.has_perm(permission, bundle.obj): if not bundle.request.user.has_perm(permission, bundle.obj):
raise Unauthorized("You are not allowed to access that resource.") raise Unauthorized("You are not allowed to access that resource.")
@@ -33,7 +33,8 @@ class PinryAuthorization(DjangoAuthorization):
if klass is False: if klass is False:
raise Unauthorized("You are not allowed to access that resource.") raise Unauthorized("You are not allowed to access that resource.")
permission = '%s.delete_%s' % (klass._meta.app_label, klass._meta.module_name) print dir(klass._meta)
permission = '%s.delete_%s' % (klass._meta.app_label, klass._meta.model_name)
if not bundle.request.user.has_perm(permission, bundle.obj): if not bundle.request.user.has_perm(permission, bundle.obj):
raise Unauthorized("You are not allowed to access that resource.") raise Unauthorized("You are not allowed to access that resource.")