From f385488bc9f106f70d0631a6c06fc70d97534db0 Mon Sep 17 00:00:00 2001
From: Thibaud Duquennoy <thibaud@duquennoy.fr>
Date: Tue, 12 Mar 2019 13:24:52 +0100
Subject: [PATCH] syntax: auto_author gives permission to everybody(#99)
syntax: auto_author gives permission to everybody(#99)
---
djangoldp/serializers.py | 13 ++++++-------
1 file changed, 6 insertions(+), 7 deletions(-)
diff --git a/djangoldp/serializers.py b/djangoldp/serializers.py
index ad46029c..3a4438d4 100644
--- a/djangoldp/serializers.py
+++ b/djangoldp/serializers.py
@@ -206,13 +206,12 @@ class LDPSerializer(HyperlinkedModelSerializer):
if self.context['request'].user.is_anonymous:
data['permissions'] += permissions.AnonymousReadOnly.anonymous_perms
- elif self.context['request'].user.is_authenticated and hasattr(obj._meta, 'auto_author'):
- if hasattr(obj._meta, 'auto_author'):
- author = getattr(obj, obj._meta.auto_author)
- if author == self.context['request'].user:
- data['permissions'] += permissions.AnonymousReadOnly.author_perms
- else:
- data['permissions'] += permissions.AnonymousReadOnly.authenticated_perms
+ if hasattr(obj._meta, 'auto_author'):
+ author = getattr(obj, obj._meta.auto_author)
+ if author == self.context['request'].user:
+ data['permissions'] += permissions.AnonymousReadOnly.author_perms
+ else:
+ data['permissions'] += permissions.AnonymousReadOnly.authenticated_perms
if hasattr(obj._meta, 'rdf_context'):
data['@context'] = obj._meta.rdf_context
--
GitLab