Anonymous access not working

I have a url with no permission check: url(r'^projects/', LDPViewSet.urls(model=Project, permission_classes=[], nested_fields=["team"]))

When I access http://test-paris.happy-dev.fr/projects/ unauthenticated, I get a 404. I tried to add all permissions and even a superadmin access to AnonymousUser.

OK I added this and tried curl -i http://localhost:8000/projects/ and got a result (an empty list)

404 is not found, not a 403 unauthenticated...

By Rob on 2018-11-01T21:34:56 (imported from GitLab project)

And i get a response from http://test-paris.happy-dev.fr/projects/ without logging in...

By Rob on 2018-11-01T22:30:51 (imported from GitLab project)

If you go to http://test-paris.happy-dev.fr/projects/ without any cookie, you'll get a empty response. http://test-paris.happy-dev.fr/projects/1/ gives you "Not found"

Ok, I actually temporarily solved this by adding explicit permissions to AnonymousUser. This makes this less of a priority, but there's still something wrong with permissions. When setting no permission_classes, we should see all the objects.

OK - the issue wasnt clear - can i suggest in future you provide curl test statements so we can isolate any browser context from the description.

i was getting an empty list not a 404 as reported from the specific link - so i didnt realise the empty list was the problem here. I think we should look at getting a complete set of test cases for permissions - so we can do regression tests.

By Rob on 2018-11-01T23:00:33 (imported from GitLab project)

@sylvain : Do I understand correctly that you found a workaround to this issue via AnonymousUser's permissions ?

By Alexandre on 2018-11-01T23:37:16 (imported from GitLab project)

Yes but it's temporary. We should have a way to allow anonymous access without giving superadmin rights to anonymous users :D

I am glad I asked that question then :-)

By Alexandre on 2018-11-02T20:22:50 (imported from GitLab project)

assigned to @thibaud and unassigned @Atkinson

closed

By Thibaud on 2019-01-10T14:36:18 (imported from GitLab project)