From ceaad7e47a77f34ed06569c34e9e56796873110a Mon Sep 17 00:00:00 2001 From: Tom Christie Date: Thu, 31 Jul 2014 22:34:30 +0100 Subject: Kickstarter sponsors --- api-guide/permissions.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'api-guide') diff --git a/api-guide/permissions.html b/api-guide/permissions.html index 1c2ef24d..afc18e56 100644 --- a/api-guide/permissions.html +++ b/api-guide/permissions.html @@ -292,7 +292,7 @@ def example_view(request, format=None):
The IsAuthenticatedOrReadOnly will allow authenticated users to perform any request.  Requests for unauthorised users will only be permitted if the request method is one of the "safe" methods; GET, HEAD or OPTIONS.
This permission is suitable if you want to your API to allow read permissions to anonymous users, and only allow write permissions to authenticated users.
This permission class ties into Django's standard django.contrib.auth model permissions.  When applied to a view that has a .model property, authorization will only be granted if the user is authenticated and has the relevant model permissions assigned.
This permission class ties into Django's standard django.contrib.auth model permissions.  When applied to a view that has a .model property, authorization will only be granted if the user is authenticated and has the relevant model permissions assigned.
POST requests require the user to have the add permission on the model.PUT and PATCH requests require the user to have the change permission on the model.