- permissions: Make sure to first check the base permissions
(
cd6979b)
Currently we first check the generic permissions and the the views actual base permission. This doesn't make sense as we should first check e.g. whether a user is even authenticated before checking more specific permissions.
- deps-dev: Bump pytest-django from 4.8.0 to 4.9.0
(
a5ab7d0)
Bumps pytest-django from 4.8.0 to 4.9.0. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: pytest-django dependency-type: direct:development update-type: version-update:semver-minor ...
Signed-off-by: dependabot[bot] [email protected]
- deps: Bump djangorestframework from 3.14.0 to 3.15.2
(
963cfcb)
Bumps djangorestframework from 3.14.0 to 3.15.2.
--- updated-dependencies: - dependency-name: djangorestframework dependency-type: direct:production update-type: version-update:semver-minor ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump pytest from 8.3.2 to 8.3.3
(
3e9059d)
Bumps pytest from 8.3.2 to 8.3.3. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-patch ...
Signed-off-by: dependabot[bot] [email protected]
- deps: Bump django from 4.2.13 to 4.2.16
(
9054023)
Bumps django from 4.2.13 to 4.2.16. - Commits
--- updated-dependencies: - dependency-name: django dependency-type: direct:production update-type: version-update:semver-patch ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump ruff from 0.6.3 to 0.8.0
(
b62d896)
Bumps ruff from 0.6.3 to 0.8.0. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-minor ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump pytest from 8.2.1 to 8.3.2
(
50ece89)
Bumps pytest from 8.2.1 to 8.3.2. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-minor ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump ruff from 0.4.6 to 0.6.3
(
773bcd3)
Bumps ruff from 0.4.6 to 0.6.3. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-minor ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump black from 23.12.1 to 24.4.2
(
58bf040)
Bumps black from 23.12.1 to 24.4.2. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: black dependency-type: direct:development update-type: version-update:semver-major ...
Signed-off-by: dependabot[bot] [email protected]
- permissions: Extend drf permission methods
(
00580d8)
instead of calling permission in each specific method (create, etc.) call super in check_object_permission
- release: 0.4.6
(
04143e4)
Automatically generated by python-semantic-release
- deps: Bump python-semantic-release/python-semantic-release
(
d9655f1)
Bumps python-semantic-release/python-semantic-release from 8.3.0 to 9.7.3. - Release notes - Changelog
--- updated-dependencies: - dependency-name: python-semantic-release/python-semantic-release dependency-type: direct:production update-type: version-update:semver-major ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump ruff from 0.3.5 to 0.4.6
(
c614700)
Bumps ruff from 0.3.5 to 0.4.6. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-minor ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump djangorestframework-jsonapi from 6.1.0 to 7.0.0
(
abe4798)
Bumps djangorestframework-jsonapi from 6.1.0 to 7.0.0. - Release notes - Changelog
--- updated-dependencies: - dependency-name: djangorestframework-jsonapi dependency-type: direct:development update-type: version-update:semver-major ...
Signed-off-by: dependabot[bot] [email protected]
- deps: Bump django from 4.2.11 to 4.2.13
(
33362de)
Bumps django from 4.2.11 to 4.2.13. - Commits
--- updated-dependencies: - dependency-name: django dependency-type: direct:production update-type: version-update:semver-patch ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump pytest from 8.2.0 to 8.2.1
(
90762a1)
Bumps pytest from 8.2.0 to 8.2.1. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-patch ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump pytest from 8.1.1 to 8.2.0
(
aaae000)
Bumps pytest from 8.1.1 to 8.2.0. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: pytest dependency-type: direct:development update-type: version-update:semver-minor ...
Signed-off-by: dependabot[bot] [email protected]
Permissions should only deal with POST/PATCH/DELETE - GET requests should be entirely governed by the visibility layer.
- release: 0.4.5
(
dc7e8e5)
Automatically generated by python-semantic-release
Co-authored-by: Fabio Ambauen [email protected]
- deps: Bump django from 4.2.9 to 4.2.11
(
a6b445d)
Bumps django from 4.2.9 to 4.2.11. - Commits
--- updated-dependencies: - dependency-name: django dependency-type: direct:production update-type: version-update:semver-patch ...
Signed-off-by: dependabot[bot] [email protected]
- deps-dev: Bump ruff from 0.2.2 to 0.3.5
(
42d7930)
Bumps ruff from 0.2.2 to 0.3.5. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-minor ...
Signed-off-by: dependabot[bot] [email protected]
Read only fields don't have a queryset (see https://github.com/encode/django-rest-framework/blame/77ef27f18fc7c11e1d2e5fd4aaa8acc51cda6792/rest_framework/utils/field_mapping.py#L288), so we need to provide a fallback.
- release: 0.4.4
(
d765283)
Automatically generated by python-semantic-release
- release: 0.4.3
(
f9a4687)
Automatically generated by python-semantic-release
Bumps ruff from 0.1.11 to 0.2.2. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-minor ...
Signed-off-by: dependabot[bot] [email protected] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- readme: Fix typo in readme
(
3a76b16)
- Pass correct request param for relationships
(
0609f64)
- release: 0.4.2
(
0b7bcc0)
Automatically generated by python-semantic-release
-
deps: Revert semantic release to 8.3.0 (
9855045) -
deps: Bump python-semantic-release/python-semantic-release (#16,
25eed91)
Bumps python-semantic-release/python-semantic-release from 8.7.0 to 8.7.2. - Release notes - Changelog
--- updated-dependencies: - dependency-name: python-semantic-release/python-semantic-release dependency-type: direct:production update-type: version-update:semver-patch ...
Signed-off-by: dependabot[bot] [email protected] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps django from 4.2.8 to 4.2.9. - Commits
--- updated-dependencies: - dependency-name: django dependency-type: direct:production update-type: version-update:semver-patch ...
Signed-off-by: dependabot[bot] [email protected] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps ruff from 0.1.9 to 0.1.11. - Release notes - Changelog - Commits
--- updated-dependencies: - dependency-name: ruff dependency-type: direct:development update-type: version-update:semver-patch ...
Signed-off-by: dependabot[bot] [email protected] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Change semantic release commit message
(
6d39527)
- Increase min python for flake8
(
393b930)
-
Add python to release action (
9c16fa4) -
Add poetry to release action (
d76b9d9) -
Add build command (
67e2529)
- Import after app is ready
(
db1d1e6)
- Migrate to poetry
(
41c9226)
add sematic release
-
Improve type checks (
0ee7e0e) -
Prevent overwrite of hidden relations in patch (
7247483) -
Remove unnecessary get_queryset from RelatedFieldMixin (
15e2ea4) -
Fix test setup (
a23d244) -
Change MRO for serializer relation fields (
09f13fe) -
Add more python versions to test (
2d988db)
switch to ruff
- Fix test suite
(
7adea9e)
- Release 0.3.0
(
4bdbc79)
-
Filter manytomany relations (
34be60c) -
Implement foreignkey visibility filtering (
7d01398) -
Add visibiility mixin for relationships (
545c36a)
Django 5 will set USE_TZ to default and warns if our settings.py doesn't contain it. Also, they renamed the master branc to main. Django-latest requires Python 3.8+, so we cannot test that combination anymore
- Unify the code base, add validation
(
faa61d2)
Since the code base baseicall does the same for four different objectives, we shouldn't have multiple, similar implementations of basically the same things.
This introduces a generic config class that is used to register permission, visibility, and
validation classes. The interface to using the package has been cleaned up as well: The model
classes won't need a mixin anymore for either visibility or permissions to work. The permission
classes don't need to inherit from the BasePermission anymore either
There is now a clean import / usage structure to use this package:
- all permissions stuff can be imported from
generic_permissions.permissions* all visibility stuff can be imported fromgeneric_permissions.visibilities* all validation stuff can be imported fromgeneric_permissions.validation
- Add initial implementation
(
2a8d8b4)