79807417

Date: 2025-11-02 22:33:23
Score: 2.5
Natty:
Report link

Django Rest Framework use DjangoModelPermissions on ListAPIView

That's where the answer was, but I did not recognize it at first. So basically, DjangoModelPermissions does not check view_model, and simply allows all GET, OPTION and HEAD requests, regardless of permissions.

Reasons:
  • Low length (0.5):
  • No code block (0.5):
  • Self-answer (0.5):
  • Low reputation (1):
Posted by: Mathijs van Nimwegen