From 18d962d43a5510c50b416388264a07c1ae8d0505 Mon Sep 17 00:00:00 2001
From: Ernesto Rico Schmidt <ernesto@helsinki.at>
Date: Wed, 20 Mar 2024 20:10:40 -0400
Subject: [PATCH] feat: use different permission & add request to context for
images
---
program/views.py | 2 ++
1 file changed, 2 insertions(+)
diff --git a/program/views.py b/program/views.py
index a0f963a1..8bf9aa95 100644
--- a/program/views.py
+++ b/program/views.py
@@ -307,6 +307,7 @@ class APIUserViewSet(
class APIImageViewSet(viewsets.ModelViewSet):
serializer_class = ImageSerializer
pagination_class = LimitOffsetPagination
+ permission_classes = [permissions.IsAuthenticatedOrReadOnly]
def get_queryset(self):
"""The queryset contains all the images if the method is safe, otherwise it only contains
@@ -336,6 +337,7 @@ class APIImageViewSet(viewsets.ModelViewSet):
serializer = ImageSerializer(
image,
+ context={"request": request}, # the serializer needs the request in the context
data=request.data,
)
--
GitLab