11

fabilya · Oct 1, 2023 · 323c688 · 323c688
1 parent 7739a00
commit 323c688
Showing 1 changed file with 4 additions and 7 deletions.
diff --git a/backend/api/permissions.py b/backend/api/permissions.py
@@ -5,10 +5,7 @@
 class OwnerUserOrReadOnly(permissions.BasePermission):
 
     def has_object_permission(self, request, view, obj):
-        return (
-            request.method in SAFE_METHODS
-            or request.user.is_authenticated
-            and request.user.is_active
-            and request.user == obj.author
-            or request.user.is_staff
-        )
+        if request.method in SAFE_METHODS:
+            return True
+
+        return obj.user == request.user