syntax: Explicit AnonymousReadOnly permission

djangoldp_account/models.py

-from django.db import models
 from django.contrib.auth.models import User
-from django.core.urlresolvers import reverse_lazy
+from django.db import models
 
 
 class Account(models.Model):
@@ -8,6 +7,7 @@ class Account(models.Model):
     picture = models.URLField(blank=True, null=True)
 
     class Meta:
+        auto_author = 'user'
         permissions = (
             ('view_account', 'Read'),
             ('control_account', 'Control'),
@@ -22,6 +22,7 @@ class ChatProfile(models.Model):
     jabberID = models.CharField(max_length=255, blank=True, null=True)
 
     class Meta:
+        auto_author = 'user'
         permissions = (
             ('view_chatprofile', 'Read'),
             ('control_chatprofile', 'Control'),
@@ -29,6 +30,3 @@ class ChatProfile(models.Model):
 
     def __str__(self):
         return '{} (jabberID: {})'.format(self.user.get_full_name(), self.jabberID)
-
-
-

djangoldp_account/urls.py

@@ -5,6 +5,7 @@ from django.conf import settings
 from django.conf.urls import url, include
 from django.contrib.auth.models import Group
 from djangoldp.views import LDPViewSet
+from djangoldp.permissions import AnonymousReadOnly
 
 from .models import ChatProfile, Account
 from .views import userinfocustom
@@ -21,12 +22,12 @@ for dldp_module in djangoldp_modules:
         pass
 
 urlpatterns = [
-    url(r'^groups/', LDPViewSet.urls(model=Group, fields=['@id', 'name', 'user_set'])),
-    url(r'^users/', LDPViewSet.urls(model=settings.AUTH_USER_MODEL, fields=user_fields, permission_classes=[],
-                                    nested_fields=user_nested_fields)),
+    url(r'^groups/', LDPViewSet.urls(model=Group, fields=['@id', 'name', 'user_set'], permission_classes=[AnonymousReadOnly])),
+    url(r'^users/', LDPViewSet.urls(model=settings.AUTH_USER_MODEL, fields=user_fields, permission_classes=[AnonymousReadOnly],
+                                    nested_fields=user_nested_fields )),
     url(r'^accounts/', include('django.contrib.auth.urls')),
-    url(r'^accounts/', LDPViewSet.urls(model=Account)),
-    url(r'^chat-profile/', LDPViewSet.urls(model=ChatProfile)),
+    url(r'^accounts/', LDPViewSet.urls(model=Account, permission_classes=[AnonymousReadOnly])),
+    url(r'^chat-profile/', LDPViewSet.urls(model=ChatProfile, permission_classes=[AnonymousReadOnly])),
     url(r'^openid/userinfo', userinfocustom),
     url(r'^openid/', include('oidc_provider.urls', namespace='oidc_provider')),
 ]