allow user to delete own post & thread

endiliey · May 7, 2018 · 404e0d6 · 404e0d6
1 parent de0f2b7
commit 404e0d6
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/backend/posts/api/views.py b/backend/posts/api/views.py
@@ -40,7 +40,7 @@ class PostDeleteAPIView(generics.DestroyAPIView):
     # because if user keep on deleting post doesn't make sense
     queryset = Post.objects.all()
     serializer_class = PostDeleteSerializer
-    permission_classes = [IsAdminUser]
+    permission_classes = [IsOwnerOrAdminOrReadOnly]
 
     def delete(self, request, pk, format=None):
         try:

diff --git a/backend/threads/api/permissions.py b/backend/threads/api/permissions.py
@@ -17,4 +17,4 @@ def has_object_permission(self, request, view, obj):
             return True
 
         # Write permissions are only allowed to the user itself
-        return obj == request.user
+        return obj.creator == request.user