Fixed api permissions

8e8ee808 · Sli · 2822d947 · 8e8ee808
Commit 8e8ee808 authored Aug 07, 2016 by Sli
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

api/views/__init__.py api/views/__init__.py +1 -1

No files found.
--- a/api/views/__init__.py
+++ b/api/views/__init__.py
@@ -24,7 +24,7 @@ class RightManagedModelViewSet(viewsets.ModelViewSet):
        try:
            if (request.method == 'GET' and can_view(obj, user)):
                return res
-            elif (request.method == 'PUSH' and can_edit(obj, user)):
+            elif (request.method != 'GET' and can_edit(obj, user)):
                return res
        except: pass # To prevent bug with Anonymous user
        raise PermissionDenied