Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check approval, publishing and set featured permissions in resource API #8850

Closed
giohappy opened this issue Feb 22, 2022 · 0 comments · Fixed by #12522
Closed

Check approval, publishing and set featured permissions in resource API #8850

giohappy opened this issue Feb 22, 2022 · 0 comments · Fixed by #12522
Assignees
Labels
Milestone

Comments

@giohappy
Copy link
Contributor

giohappy commented Feb 22, 2022

Featured, approval, and publishing can only be set with specific permissions and settings. At the moment these controls are not enforced at the API level.

The permission classes for ResourceBaseViewSet will be extended to take into account the new can_approve, can_publish and can_feature methods (see #8848) and enforce authorizations on requests to change BaseResource.is_approved, BaseResource.is_published and BaseResource.featured fields.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants