smokephil/paperless-ngx
1
0
Fork 0
mirror of https://github.com/paperless-ngx/paperless-ngx.git synced 2025-12-09 08:15:27 +01:00
Code Issues Projects Releases Packages Wiki Activity

Fix: enforce object permissions for app config (#5516)

Browse source
This commit is contained in:
shamoon 2024-01-23 12:23:15 -08:00 • committed by GitHub
parent 6651c80fb9
commit 88ae60a4a0
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/paperless/views.py
View file

@ -11,6 +11,7 @@ from rest_framework.authtoken.models import Token
from rest_framework.filters import OrderingFilter
from rest_framework.generics import GenericAPIView
from rest_framework.pagination import PageNumberPagination
from rest_framework.permissions import DjangoObjectPermissions
from rest_framework.permissions import IsAuthenticated
from rest_framework.response import Response
from rest_framework.viewsets import ModelViewSet
@ -166,4 +167,4 @@ class ApplicationConfigurationViewSet(ModelViewSet):
queryset = ApplicationConfiguration.objects
serializer_class = ApplicationConfigurationSerializer
permission_classes = (IsAuthenticated,)
permission_classes = (IsAuthenticated, DjangoObjectPermissions)