From 8123c6b1d6b7a7e826328fa9d0434df8a3fae17f Mon Sep 17 00:00:00 2001 From: Sylvain Le Bon <sylvain@startinblox.com> Date: Sat, 7 Oct 2023 13:18:53 +0200 Subject: [PATCH] doc: added a section for LDP_INCLUDE_INNER_PERMS --- docs/create_model.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/create_model.md b/docs/create_model.md index f0a1fa82..189ef99a 100644 --- a/docs/create_model.md +++ b/docs/create_model.md @@ -367,6 +367,12 @@ Custom classes can be defined to handle specific permission checks. These class * has_object_permission: called on object requests on the first access to the object to check whether the user has rights on the request object. * get_permissions: called on every single resource rendered to output the permissions of the user on that resource. This method should not access the database as it could severly affect performances. +### Inner permission rendering + +For performance reasons, ACLs of resources inside a list are not rendered, which may require the client to request each single resource inside a list to get its ACLs. In some cases it's preferable to render these ACLs. This can be done using the setting `LDP_INCLUDE_INNER_PERMS`, setting its value to True. + +## Other model options + ### view_set In case of custom viewset, you can use -- GitLab