From b6f6d524d6ac473e308c6682f64de23cc2ee1b92 Mon Sep 17 00:00:00 2001 From: shamoon <4887959+shamoon@users.noreply.github.com> Date: Tue, 11 Jun 2024 01:00:10 -0700 Subject: [PATCH] Fix: respect model permissions for ui_settings API endpoint --- src/documents/views.py | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/src/documents/views.py b/src/documents/views.py index 584a994cf..68addd0f4 100644 --- a/src/documents/views.py +++ b/src/documents/views.py @@ -61,7 +61,6 @@ from rest_framework.mixins import DestroyModelMixin from rest_framework.mixins import ListModelMixin from rest_framework.mixins import RetrieveModelMixin from rest_framework.mixins import UpdateModelMixin -from rest_framework.permissions import DjangoModelPermissions from rest_framework.permissions import IsAuthenticated from rest_framework.response import Response from rest_framework.views import APIView @@ -1540,14 +1539,9 @@ class StoragePathViewSet(ModelViewSet, PermissionsAwareDocumentCountMixin): class UiSettingsView(GenericAPIView): queryset = UiSettings.objects.all() - permission_classes = (IsAuthenticated, DjangoModelPermissions) + permission_classes = (IsAuthenticated, PaperlessObjectPermissions) serializer_class = UiSettingsViewSerializer - perms_map = { - "GET": ["%(app_label)s.view_%(model_name)s"], - "POST": ["%(app_label)s.change_%(model_name)s"], - } - def get(self, request, format=None): serializer = self.get_serializer(data=request.data) serializer.is_valid(raise_exception=True)