fixed author permissions for comment

This commit is contained in:
yann 2025-06-12 09:57:03 +02:00
parent e442eac8a5
commit 14e37a5017

View File

@ -237,3 +237,18 @@ class CommentViewSet(ModelViewSet):
return Response(response, status=status.HTTP_201_CREATED) return Response(response, status=status.HTTP_201_CREATED)
response = {"detail": f"{user} isn't contributor for '{project}'"} response = {"detail": f"{user} isn't contributor for '{project}'"}
return Response(response, status=status.HTTP_403_FORBIDDEN) return Response(response, status=status.HTTP_403_FORBIDDEN)
def partial_update(self, request, *args, **kwargs):
"""
check if requestor is author
then save changes and returns project details
"""
comment = self.get_object()
if request.user != comment.author:
raise PermissionDenied()
serialized = CommentDetailSerializer(comment,
data=request.data,
partial=True)
if serialized.is_valid(raise_exception=True):
serialized.save()
return Response(serialized.data)