From: shamoon <4887959+shamoon@users.noreply.github.com>
Date: Tue, 11 Jun 2024 08:00:10 +0000 (-0700)
Subject: Fix: respect model permissions for ui_settings API endpoint
X-Git-Tag: v2.10.0~1^2~19
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b6f6d524d6ac473e308c6682f64de23cc2ee1b92;p=thirdparty%2Fpaperless-ngx.git

Fix: respect model permissions for ui_settings API endpoint
---

diff --git a/src/documents/views.py b/src/documents/views.py
index 584a994cf5..68addd0f4d 100644
--- a/src/documents/views.py
+++ b/src/documents/views.py
@@ -61,7 +61,6 @@ from rest_framework.mixins import DestroyModelMixin
 from rest_framework.mixins import ListModelMixin
 from rest_framework.mixins import RetrieveModelMixin
 from rest_framework.mixins import UpdateModelMixin
-from rest_framework.permissions import DjangoModelPermissions
 from rest_framework.permissions import IsAuthenticated
 from rest_framework.response import Response
 from rest_framework.views import APIView
@@ -1540,14 +1539,9 @@ class StoragePathViewSet(ModelViewSet, PermissionsAwareDocumentCountMixin):
 
 class UiSettingsView(GenericAPIView):
     queryset = UiSettings.objects.all()
-    permission_classes = (IsAuthenticated, DjangoModelPermissions)
+    permission_classes = (IsAuthenticated, PaperlessObjectPermissions)
     serializer_class = UiSettingsViewSerializer
 
-    perms_map = {
-        "GET": ["%(app_label)s.view_%(model_name)s"],
-        "POST": ["%(app_label)s.change_%(model_name)s"],
-    }
-
     def get(self, request, format=None):
         serializer = self.get_serializer(data=request.data)
         serializer.is_valid(raise_exception=True)