Returning 403 when you don't have enough permissions

This commit is contained in:
korenstin 2024-08-04 21:58:57 +02:00
parent b8f81048a5
commit cbf92651f0
1 changed files with 2 additions and 4 deletions

View File

@ -35,11 +35,9 @@ class ProtectQuerysetMixin:
try:
return super().get_object(queryset)
except Http404 as e:
try:
super().get_object(self.get_queryset(filter_permissions=False))
raise PermissionDenied()
except Http404:
if self.get_queryset(filter_permissions=False).count() == self.get_queryset().count():
raise e
raise PermissionDenied()
def get_form(self, form_class=None):
form = super().get_form(form_class)