custom obj permission still allows GET request to AnonymousUser #8675
Unanswered
Klvxn
asked this question in
Question & Answer
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
This is what my permission class looks like
`
class CustomPerm(BasePermission):
`
Goal: no other user should have access(get, options, post etc) to the object except object.user
but AnonymousUsers is still able to read(get, options request) the object.
Beta Was this translation helpful? Give feedback.
All reactions