alex/voyage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

permisison fixes

Browse Source
This commit is contained in:
Sean Morley
2024-07-09 16:48:52 -04:00
parent d64abf2273
commit 67619aec57
8 changed files with 112 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
backend/server/adventures/views.py
View File

@@ -5,11 +5,11 @@ from .models import Adventure, Trip
from .serializers import AdventureSerializer, TripSerializer
from rest_framework.permissions import IsAuthenticated
from django.db.models import Q, Prefetch
from .permissions import IsOwnerOrReadOnly
from .permissions import IsOwnerOrReadOnly, IsPublicReadOnly
class AdventureViewSet(viewsets.ModelViewSet):
serializer_class = AdventureSerializer
permission_classes = [IsAuthenticated, IsOwnerOrReadOnly]
permission_classes = [IsOwnerOrReadOnly, IsPublicReadOnly]
def get_queryset(self):
return Adventure.objects.filter(
@@ -42,7 +42,7 @@ class AdventureViewSet(viewsets.ModelViewSet):
class TripViewSet(viewsets.ModelViewSet):
serializer_class = TripSerializer
permission_classes = [IsAuthenticated, IsOwnerOrReadOnly]
permission_classes = [IsOwnerOrReadOnly, IsPublicReadOnly]
def get_queryset(self):
return Trip.objects.filter(