diff options
| author | Tom Christie | 2012-09-27 21:51:46 +0100 |
|---|---|---|
| committer | Tom Christie | 2012-09-27 21:51:46 +0100 |
| commit | ee36e4ab0c0508a590c6b73a23ec82b7f1e49bd0 (patch) | |
| tree | 8c74086caf32984fe5adb9776558f04e5e56dc76 /rest_framework/templates | |
| parent | 4d906938a9304be119a9b15f6540a8cbab6f1154 (diff) | |
| download | django-rest-framework-ee36e4ab0c0508a590c6b73a23ec82b7f1e49bd0.tar.bz2 | |
Only display forms when user has permissions. #159
Diffstat (limited to 'rest_framework/templates')
| -rw-r--r-- | rest_framework/templates/rest_framework/base.html | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/rest_framework/templates/rest_framework/base.html b/rest_framework/templates/rest_framework/base.html index d0a25e2e..867051e6 100644 --- a/rest_framework/templates/rest_framework/base.html +++ b/rest_framework/templates/rest_framework/base.html @@ -89,7 +89,7 @@ </form> {% endif %} - {% if 'OPTIONS' in allowed_methods and api_settings.FORM_METHOD_OVERRIDE %} + {% if options_form %} <form class="button-form" action="{{ request.get_full_path }}" method="POST" class="pull-right"> {% csrf_token %} <input type="hidden" name="{{ api_settings.FORM_METHOD_OVERRIDE }}" value="OPTIONS" /> @@ -97,7 +97,7 @@ </form> {% endif %} - {% if 'DELETE' in allowed_methods and api_settings.FORM_METHOD_OVERRIDE %} + {% if delete_form %} <form class="button-form" action="{{ request.get_full_path }}" method="POST" class="pull-right"> {% csrf_token %} <input type="hidden" name="{{ api_settings.FORM_METHOD_OVERRIDE }}" value="DELETE" /> @@ -121,7 +121,7 @@ {% if response.status_code != 403 %} - {% if 'POST' in allowed_methods %} + {% if post_form %} <form action="{{ request.get_full_path }}" method="POST" {% if post_form.is_multipart %}enctype="multipart/form-data"{% endif %} class="form-horizontal"> <fieldset> <h2>POST: {{ name }}</h2> @@ -144,7 +144,7 @@ </form> {% endif %} - {% if 'PUT' in allowed_methods and api_settings.FORM_METHOD_OVERRIDE %} + {% if put_form %} <form action="{{ request.get_full_path }}" method="POST" {% if put_form.is_multipart %}enctype="multipart/form-data"{% endif %} class="form-horizontal"> <fieldset> <h2>PUT: {{ name }}</h2> |