by Luc Saffre · in Developers · assigned to Luc Saffre

Summary

Children

Comments

• 2 years, 6 months ago by Luc Saffre about #5523 (Traceback when anonymous tries to GET /#/api/users/Me/8) : An action with select_rows = True may safely assume that the obj given to get_action_permission(self, ar, obj, state) is not None.
• 2 years, 6 months ago by Luc Saffre about #5523 (Traceback when anonymous tries to GET /#/api/users/Me/8) : Done. I pushed my changes (in lino. xl and book).
• 2 years, 6 months ago by Luc Saffre about #5523 (Traceback when anonymous tries to GET /#/api/users/Me/8) : But the test suite shows that there are still side effects, to be continued tomorrow.
• 2 years, 6 months ago by Luc Saffre about #5523 (Traceback when anonymous tries to GET /#/api/users/Me/8) : I added a code snippet in docs/specs/invalid_requests.rst to cover this case.
• 2 years, 6 months ago by Luc Saffre about #5523 (Traceback when anonymous tries to GET /#/api/users/Me/8) : BaseRequest.get_permission() now also checks the actor permissions for row actions. Until now we assumed that when somebody requests a row action, they have had the actor's permission. Which was of course naive.
• 2 years, 6 months ago by Luc Saffre about #5523 (Traceback when anonymous tries to GET /#/api/users/Me/8) : For example: go chatter; runserver; sign in as any user; click on "My settings"; in another terminal run pm prep in chatter (to delete the sessions); in the browser window hit Ctrl+R. The runserver process now ays AttributeError: type object 'AnonymousUser' has no attribute 'get_chooser_for_field' (...
• 2 years, 7 months ago by Luc Saffre about #5523 (Traceback when anonymous tries to GET /#/api/users/Me/8) : Created new Ticket #5523 (Traceback when anonymous GET 127.0.0.1:8000/#/api/users/Me/8?rs=567263059).