diff options
Diffstat (limited to 'rest_framework')
| -rw-r--r-- | rest_framework/permissions.py | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/rest_framework/permissions.py b/rest_framework/permissions.py index 9069d315..fcebf046 100644 --- a/rest_framework/permissions.py +++ b/rest_framework/permissions.py @@ -5,7 +5,7 @@ from __future__ import unicode_literals from django.http import Http404 from rest_framework.compat import get_model_name -SAFE_METHODS = ['GET', 'HEAD', 'OPTIONS'] +SAFE_METHODS = ('GET', 'HEAD', 'OPTIONS') class BasePermission(object): @@ -185,7 +185,7 @@ class DjangoObjectPermissions(DjangoModelPermissions): # they have read permissions to see 403, or not, and simply see # a 404 response. - if request.method in ('GET', 'OPTIONS', 'HEAD'): + if request.method in SAFE_METHODS: # Read permissions already checked and failed, no need # to make another lookup. raise Http404 |