diff options
| author | Tom Christie | 2014-07-31 22:34:30 +0100 | 
|---|---|---|
| committer | Tom Christie | 2014-07-31 22:34:30 +0100 | 
| commit | ceaad7e47a77f34ed06569c34e9e56796873110a (patch) | |
| tree | 75ff19eaba601dc7eccbf6acefae6b7b089ccd37 /api-guide | |
| parent | 842caee00fd158121045ee5b2b4e5ace416ec1e6 (diff) | |
| download | django-rest-framework-ceaad7e47a77f34ed06569c34e9e56796873110a.tar.bz2 | |
Kickstarter sponsors
Diffstat (limited to 'api-guide')
| -rw-r--r-- | api-guide/permissions.html | 2 | 
1 files changed, 1 insertions, 1 deletions
| diff --git a/api-guide/permissions.html b/api-guide/permissions.html index 1c2ef24d..afc18e56 100644 --- a/api-guide/permissions.html +++ b/api-guide/permissions.html @@ -292,7 +292,7 @@ def example_view(request, format=None):  <p>The <code>IsAuthenticatedOrReadOnly</code> will allow authenticated users to perform any request.  Requests for unauthorised users will only be permitted if the request method is one of the "safe" methods; <code>GET</code>, <code>HEAD</code> or <code>OPTIONS</code>.</p>  <p>This permission is suitable if you want to your API to allow read permissions to anonymous users, and only allow write permissions to authenticated users.</p>  <h2 id="djangomodelpermissions">DjangoModelPermissions</h2> -<p>This permission class ties into Django's standard <code>django.contrib.auth</code> <a href="https://docs.djangoproject.com/en/1.0/topics/auth/#permissions">model permissions</a>.  When applied to a view that has a <code>.model</code> property, authorization will only be granted if the user <em>is authenticated</em> and has the <em>relevant model permissions</em> assigned.</p> +<p>This permission class ties into Django's standard <code>django.contrib.auth</code> <a href="https://docs.djangoproject.com/en/dev/topics/auth/customizing/#custom-permissions">model permissions</a>.  When applied to a view that has a <code>.model</code> property, authorization will only be granted if the user <em>is authenticated</em> and has the <em>relevant model permissions</em> assigned.</p>  <ul>  <li><code>POST</code> requests require the user to have the <code>add</code> permission on the model.</li>  <li><code>PUT</code> and <code>PATCH</code> requests require the user to have the <code>change</code> permission on the model.</li> | 
