diff --git a/djangoldp/views.py b/djangoldp/views.py index b56373541141af09be854d977ac469606289bdc1..b4ae860297dbd663be7a4fe595f3ccacbb9c582a 100644 --- a/djangoldp/views.py +++ b/djangoldp/views.py @@ -50,8 +50,12 @@ class AnnonReadOnly(WACPermissions): class DjangoObjectPermissionsFilter(BaseFilterBackend): def filter_queryset(self, request, queryset, view): + """ + Ensure that queryset only contains objects visible by current user + """ perm="view_{}".format(queryset.model._meta.model_name.lower()) - return get_objects_for_user(request.user, perm, klass=queryset.model) + objects = get_objects_for_user(request.user, perm, klass=queryset) + return objects class LDPViewSetGenerator(ModelViewSet): """An extension of ModelViewSet that generates automatically URLs for the model"""